It's 10:50 on a Tuesday night and the receptionist's phone, which is also the clinic's phone, lights up. A patient has sent a photo of her son's rash and asked whether the syrup from this morning is still okay. Above that message sits a lab report someone forwarded at 6 pm to the wrong Mr Sharma, and below it a voice note from a patient asking what his sugar result means. Nobody planned any of this. WhatsApp simply became the clinic's front desk, records room and after-hours line, all on one handset.
This post is about drawing a line. Some messages belong on WhatsApp and make the day easier for everyone. Others carry diagnoses and reports that a chat app was never set up to hold safely inside a clinic. The line isn't about technology. It's about who can see the phone and what lands on it.
Why the chat fills up with the wrong things
Picture how WhatsApp gets into a practice: sideways. A doctor gave out a personal number to a few chronic patients, a receptionist started confirming tokens from her own phone, and soon patients treated whichever number they had as a direct line to the doctor. Each step was reasonable on its own. Together they produced a channel with no owner and no rules.
The mechanism that causes trouble is simple. A chat is easy to forward and easy to mis-tap. Media saves to the phone's gallery by default. Chat backups go to whatever cloud account the phone is signed into, which may belong to a staff member. WhatsApp Web stays logged in on the reception computer after the shift ends. And a phone that four people unlock during the day is, in practice, a shared file cabinet with no lock.
Then there is the clinical problem. When a patient sends a symptom and the doctor replies, that exchange is a consultation, but it rarely makes it into the patient's record. The Telemedicine Practice Guidelines, 2020 address consultations over text and chat; how they apply to your setup, and what your state expects, is worth checking with someone qualified rather than assuming.
A simple map: send, send with care, keep off
Sort every message type your clinic sends into three groups. Put the list on the reception wall.
Send freely: logistics. These carry no clinical detail and save the receptionist a call each.
- Appointment and review-visit reminders with date, time and doctor's name
- Clinic timings, holiday closures, which day the visiting specialist sits
- Directions and what to bring (old prescriptions, previous reports in hand)
- Invoices and payment receipts
Send with care: documents the patient already expects. These contain health information, so they go only to the number recorded for that patient and only after the patient agreed to it.
- The prescription from today's consult, as a PDF rather than a typed message
- Vaccination reminders, sent to the parent or guardian for a child
- A short notice that lab results are ready, asking the patient to call or visit
Keep off WhatsApp: anything that interprets or discloses.
- Diagnoses and discussion of what a result means
- Lab reports and imaging reports themselves, unless the patient has explicitly asked for them that way and you've confirmed the number
- Anything about a patient sent to a family member who isn't the recorded contact
- Photos of patients taken in the clinic
- Replies to symptom questions late at night, which become undocumented consults
The 'results ready' line is worth dwelling on. Telling a patient their results have arrived is logistics. Sending the report invites a diabetic patient to read a number alone at midnight and decide for himself what to do. Ask them to come in or call, and keep the conversation where it can be recorded. If you track send-out samples closely, this pairs well with tracking lab samples from collection to result.
Consent, recorded at the desk
Consent doesn't need a legal form to start. It needs three questions at registration, written into the patient's record:
- Which number may the clinic message?
- What may we send there: reminders only, or prescriptions and invoices too?
- For a child or an elderly patient, who is the contact or guardian, and may anyone else receive messages?
That third question matters more than it looks. An elderly father's number is often his son's phone. A teenager's number may be shared with a sibling. Write down who the messages actually reach. When a patient says stop, mark it the same day. Data protection law in India is evolving and requirements vary; take advice on what written consent your clinic should hold, but don't wait for that advice to start asking the three questions.
Who can see the clinic phone
Say a two-doctor clinic has one receptionist on each shift, a dispensary assistant and a cleaner who sometimes answers the phone. That's five people who may unlock the clinic handset in a week. Each of them can scroll every chat. The fix is boring and it works:
- One clinic-owned phone and one WhatsApp Business number. No clinic messaging from personal phones.
- A screen lock that changes when someone leaves the job.
- Turn off automatic media download so reports and photos don't pile up in the gallery.
- Check which account holds the chat backup. It should be the clinic's, not a staff member's.
- Log out of WhatsApp Web on the reception computer at closing, and check the linked-devices list monthly.
- Doctors stop giving out personal numbers. Patients get the clinic number and a clear line on response times.
That last one is the hardest, because the doctor's personal number feels like good service. It also means the doctor is on call forever and the clinic has no record of half its advice. A polite printed card at the desk, 'For appointments and reports, message this number during clinic hours', does more than any software.
What to put in place this month
- Write the send / send with care / keep off list and pin it at reception.
- Move all patient messaging to one clinic number on one clinic phone.
- Add the three consent questions to your registration card or form.
- Draft fixed wording for reminders, invoices and the results-ready notice so staff don't improvise.
- Agree what staff reply when a patient sends a symptom: a short line offering a call or a visit, logged for the doctor.
- Review the phone's linked devices, backup account and lock on the first of each month.
A system helps here mainly by taking the typing out of staff hands, so messages go to the number on file in fixed wording instead of being copied into chats one by one. MyCliniCore sends appointment reminders, prescriptions, invoices and vaccination reminders on WhatsApp, an automatic birthday greeting to patients whose date of birth is recorded, and a results ready message only when staff confirm a lab order's results and tick Notify, which tells the patient the results are ready and does not carry the report. A welcome message for new patients and a we miss you message after the interval the clinic picks (3, 6, 9 or 12 months since the last visit) are both off until the clinic switches them on in Settings. You can see the rest on the features page.
Whatever you use, the rule stays the same: logistics in the chat, conversations about health in the consult room or on a recorded call. If you'd like to see how this would fit your queue and your desk, MyCliniCore is now available for general practices and polyclinics and the team sets it up with you, so tell us about your clinic.