Clinics send patients messages every day: appointment confirmations, reminders, a note that a test result is ready, a checkup date, a payment reminder, a campaign announcement. Because all of them go through the same channel, they are assumed to be treated the same. Yet legally and operationally there are two separate classes: messages that carry out the service and commercial electronic messages. When this distinction is not made, a clinic either risks sanctions by sending commercial messages without consent or restricts necessary service messages needlessly. This article explains the practical way to classify patient messages, manage consent and build message content safely. It is not legal advice; consult your adviser for an assessment specific to your organization. (İYS stands for İleti Yönetim Sistemi, Türkiye's Message Management System, where commercial-message consents and refusals are recorded.)
Two classes: operational and commercial
Operational (service) message: a message sent to carry out an already existing service relationship with the patient. Examples: an appointment confirmation, an appointment reminder, a change of appointment, a pre-examination preparation instruction, a general notification that a result is ready.
Commercial electronic message: a message sent to promote or market goods or services, or to promote the business. Examples: a discount campaign, an announcement of a new service, a birthday campaign message, a call such as "come in for a checkup this month."
The line between the two classes is often clear and sometimes blurry. For example, "contact us for your checkup appointment" sent to a patient whose checkup time has come may be treated as a reminder tied to the treatment process; if a campaign is added to the same message, it may take on the nature of a commercial message. In borderline cases a more cautious interpretation is needed and the decision should be recorded. As an approach: two purposes are not mixed in the same message.
Commercial messages: consent and İYS
Sending commercial electronic messages is subject to the law regulating electronic commerce and the regulation on commercial communication based on it. The general rule is that the recipient's prior approval must be obtained, and the recipient must be able to exercise the right of refusal at any time. Recipient approvals and refusals are held on İYS, and businesses that send are expected to work in line with this system. For rules, exceptions (for example, recipients who are tradespeople or merchants) and sanctions, refer to official sources and your adviser; this article is not a detailed guide.
Principles that matter for a clinic:
- Consent must be separate and optional. Permission for commercial messages must not be tied to the service record as mandatory or pre-ticked. A patient must not be forced to approve marketing messages to book an appointment.
- Consent must be recorded. Who gave consent, when, for which channel and by what route? Refusal and withdrawal must be recorded with the same care.
- Refusal must be easy. Every commercial message must have a clear way out.
- Without consent, no sending. An automation that sends commercial messages to a recipient without consent on İYS is not working according to the rule. In a properly designed system the consent check is a mandatory step before sending.
Delivered / read
Delivery and read status are written to the conversation timeline; the patient's reply lands in the same record.
- The process is complete here.
- If the patient opts out of the channel06a Opt-out
All steps
- 01 Trigger (Trigger) An appointment confirmation, a form reminder or a campaign message starts the flow. A synthetic name pattern is shown instead of a patient name.
- 02 Classification (Classification) Is the message an operational service message or a commercial one? The decision is recorded with the rule that applied.
- 03 Channel consent and quiet hours (Consent) The patient's preferred channel, opt-out status and quiet-hours window are checked.
- 04 IYS check (commercial only) (Consent) For commercial messages the consent record is verified before sending. Operational messages skip this step.
- 05 Send (Channel) Generic content and, where needed, an identity-verified secure link are sent. No health information appears in plain text.
- 06 Delivered / read (Patient) Delivery and read status are written to the conversation timeline; the patient's reply lands in the same record.
Alternative path from 03 Channel consent and quiet hours; it returns to the main flow at 05 Send.
- 03a Quiet hours: deferred (Consent) The message is not rejected; it is sent when the patient's quiet hours end.
Alternative path from 04 IYS check (commercial only); the process ends on this path.
- 04a Blocked: no commercial-message consent (Consent) Fail-closed: when consent cannot be verified, nothing is sent. The reason is recorded and visible to the front desk.
Alternative path from 05 Send; it returns to the main flow at 06 Delivered / read.
- 05a Delivery failure (Channel) The channel returned an error or the number/address is invalid.
- 05b Retry (Channel) The message is retried under the same identity, so the patient does not get duplicates. If it still fails, the reason is shown.
Alternative path from 06 Delivered / read; the process ends on this path.
- 06a Opt-out (Patient) The patient asks to leave a channel; the preference updates and later messages do not use it.
06 Delivered / read
Health service promotion rules
There is an extra layer in health. The regulation governing promotion and information activities in health services limits the promotion health facilities may do. So sending a commercial message for a clinic is not just a matter of İYS consent; the content must also comply with health service promotion rules. For example, exaggerated promises, comparative superiority claims and some price or campaign wording may be restricted. Clarify with your health-law adviser which content can be used; have message templates approved within this framework and fix them in the system.
Message content: do not send health information
Independent of the consent matter, there is a principle valid for every patient message: the message should contain no health information. The reason is simple: SMS and messaging services appear on the patient's lock screen; the phone can fall into someone else's hands; the message passes through operator infrastructure. The comparison below shows the principle.
| Risky | Safe |
|---|---|
| "Your blood sugar test came out high, see your physician." | "Your results are ready. You can view them via a secure link after physician approval." |
| "Your cardiology appointment is tomorrow at 14:00." | "We remind you of your appointment tomorrow at 14:00. Tap the link to cancel or change." |
| "You have an unpaid debt of 4,200 TL." | "There is a notice about your account. View it via the secure link." |
A result notification should be sent after physician review and the publishing decision; if the result has not been published, no notification should go. The link in the message should be personal and time-limited and should ask for patient identity verification when opened.
Channel preference and quiet hours
Every patient has a channel preference: SMS, WhatsApp, email or none. The preference must be recorded and a message should go only through the channel that fits it. Quiet hours matter just as much: a reminder arriving at midnight bothers the patient even when well-meant and may turn into a complaint. Messages falling in quiet hours should be deferred to the next suitable time. For foreign patients in different time zones, quiet hours should apply according to the patient's local time.
Corporate messaging channels such as WhatsApp have their own usage rules and template approval processes; the channel connection should be set up to comply with them. The approach to channel infrastructure is described on the messaging channels page.
How is a reminder automation set up?
A well-designed reminder automation works with this logic:
- Trigger: the appointment is approaching.
- Class: this is an operational message.
- Channel and time: the patient's preferred channel; outside quiet hours.
- Content: a template with no health information; a cancel/change link.
- Delivery: delivery and read status are recorded.
- Error: if delivery fails, it is retried; if it still fails, a task falls to a staff member.
A commercial campaign is separate from this flow: the consent check is mandatory and if there is no consent, no sending takes place. Having these two flows run under separate rules prevents accidentally sending a campaign through the operational message channel. For the general scope of automation see the automation feature, and for the messaging scope the patient communication page.
Sample templates: what goes and what does not
In practice, the most useful practice is a small number of pre-approved templates. The examples below only show structure; adapt them to your language and your organization's rules.
Appointment confirmation (operational). Organization name, date and time, cancel/change link. No specialty, physician field or complaint information.
Appointment reminder (operational). The same structure; sent a day before or on the morning of the day. If the patient needs a preparation instruction (such as coming fasting), the instruction is given in general wording with a secure link.
Result notification (operational). "Your results are ready" and a secure link. The result goes after physician review and the publishing decision. The message has no value, diagnosis or comment.
Checkup reminder (operational, in the context of ongoing treatment). "Your checkup time is near; book an appointment here." It contains no campaign or discount.
Payment reminder (operational). The amount is not written; a secure link is included. The tone should be polite and neutral.
Campaign or information announcement (commercial). Goes only to recipients with consent on İYS, with approved content and a clear refusal route. The content should be reviewed beforehand for compliance with health service promotion rules.
Records and audit: what should be kept?
In patient messaging, record keeping gains importance for both internal audit and any complaint. Information that should be kept includes: the class of the message (operational/commercial), which template it was sent with, send time and channel, delivery and read status, the result of the consent check and the error/retry history. On the other hand, the sensitive part of a message (such as a personal link or a password) should not be written to general logs. An audit trail lets you answer quickly the question "why and with what consent did you send this message to this patient?" And if a patient claims at some point that they did or did not give consent, the record becomes the single source of truth.
Staff training and responsibility
Staff habit matters as much as the technical setup. Basic measures: all staff who send messages know the difference between the two classes, they do not message patients from their own phones, and bulk-sending authority is restricted to a limited role. Bulk campaign sending should be a separate permission and approval-requiring action. Otherwise an unauthorized employee can send commercial messages to hundreds of patients without a consent check. See the roles and permissions feature for permission separation.
Common mistakes
- Adding a campaign to the end of an appointment reminder. Two purposes in one message; the message may count as commercial.
- Pulling a bulk message list from old records. Sending commercial messages to people with no consent record.
- Leaving the consent box pre-ticked. Consent must be given by a real choice.
- Writing a diagnosis, test or debt amount in a message.
- Delaying the processing of a refusal. When a refusal is received, sending must stop immediately.
- Ignoring channel preference. Writing on WhatsApp when the patient does not want WhatsApp.
Checklist
- Are operational and commercial messages in separate templates and separate flows?
- Is permission for commercial messages separate, optional and not pre-ticked?
- Are consent, refusal and withdrawal recorded; how is İYS conformance ensured?
- Is there no health information in messages?
- Does the result notification go after physician publication?
- Are channel preference and quiet hours applied?
- Is there retry and human intervention on delivery failure?
- Have promotional contents been reviewed against health service promotion rules?
Conclusion
When class, consent, channel, time and content are each set up correctly, patient messages turn into a communication line that does not disturb the patient and reduces legal risk. The basic rule is simple: a service message carries out the service, a commercial message rests on consent, and no message carries health information. For application on the appointment side see the doctor appointment system page, and for the general data protection framework the KVKK-compliant patient tracking guide.
