Secure Email Versus Secure SMS for Patient Communication
Both are notification paths to the same Secure Chat. The question is which one reaches the patient more reliably for the message you are sending.
Get started for freeSchedule a demo →
The short answer
BloomText supports two notification paths to Secure Chat: secure SMS (a text message with a secure link) and secure email (an email notification that leads to the same portal). Both deliver the patient to the same encrypted conversation. The right choice depends on urgency, patient preference, and access. SMS is faster and more likely to be seen immediately. Secure email works for patients who prefer email or have a shared phone number. Neither is ordinary unencrypted communication — both lead to Secure Chat.
Why organizations need both notification paths
Not every patient responds to the same channel. Some patients check text messages within minutes but ignore email. Others are more comfortable with email and respond more reliably to an inbox notification. Some patients have a shared family phone number that makes SMS inconvenient for private health communication.
An organization that only offers one path will miss patients on the other side. The goal is not to choose between email and SMS permanently — it is to reach each patient through the channel that works for them.
Ordinary email and ordinary SMS are both noncompliant
Sending protected health information through regular email — Gmail, Outlook, Yahoo — is not HIPAA compliant. The message is not encrypted in a way the organization controls, there is no BAA with the email provider, and there is no audit trail. Standard SMS has the same limitations. Neither channel is secure for PHI.
Secure email and secure SMS in BloomText are different from ordinary email and ordinary SMS. Both are notification paths to an encrypted portal — not unprotected communication.
Encrypted email portals are not the same as secure email in BloomText
Traditional encrypted email services send a notification that requires the recipient to create an account, set a password, and navigate a separate portal. Patients find this confusing. Open rates are low. The message is compliant but unread.
BloomText secure email is simpler. The patient receives an email notification, clicks through, and replies in a portal they can use immediately — no account creation, no password setup. The experience is the same Secure Chat portal SMS patients use.
When to use secure SMS versus secure email
When a patient has only a phone number on file, the notification goes by SMS. When a patient has only an email on file, the notification goes by email. When both are on file, the patient receives both an SMS and an email notification for each secure message — whichever they open first leads to the same Secure Chat conversation.
This means the delivery path is determined by what contact information is on file for the patient, not by a per-message channel selector. If you want a patient to receive only email notifications, add only their email address. If you want them to receive only SMS, add only their phone number.
How both paths work in BloomText
Secure SMS: a staff member sends a message to a patient with a phone number on file. The patient receives a text message with a secure link, taps it, and replies in the Secure Chat portal. Secure email: a staff member sends a message to a patient with an email address on file. The patient receives an email notification, clicks through, and replies in the same Secure Chat portal.
Both paths deliver the patient to the same conversation. Both are covered by BloomText's signed BAA. Both appear in your team's shared inbox. See secure email for healthcare for a full explanation of the email path, and HIPAA compliant texting for the SMS path.
Frequently Asked Questions
- No. Secure email is a notification path to Secure Chat. The patient receives an email notification and clicks through to an encrypted portal to read and reply. The reply does not travel through regular email.
- The patient receives both an SMS and an email notification for each secure message. Whichever they open first leads to the same Secure Chat conversation. To use only one channel, add only that contact method for the patient.
- SMS is typically faster for time-sensitive messages. Email may work better for patients who are not responsive to text. The right choice depends on the patient and the message.
- Ordinary email through consumer providers like Gmail, Outlook, and Yahoo is not HIPAA compliant for PHI. The organization does not control the encryption and there is no BAA with the email provider.
- Yes. A signed Business Associate Agreement is included on every plan, including the free plan. It covers both the SMS and email notification paths.
