WhatsApp appointment reminders for clinics: how to do it right (and stay GDPR-compliant)

WhatsApp is the app your patients check most, so a WhatsApp reminder is usually read long before an email or a text message. But there's a big difference between reception sending messages by hand from a phone and having automatic reminders with confirmation. Here are the options, what works and what to keep in mind with patient data.

The three ways to send reminders by WhatsApp

Option	How it works	Who it suits
Reception's phone (regular WhatsApp or the Business app)	Someone types or copies a message to each patient	Practices with very few appointments
WhatsApp Business app with quick replies	Saved templates, but sent one by one	A bit faster, still manual
WhatsApp Business API (automatic)	The system sends the reminder on its own, at the right time, and collects the reply	Clinics with a full diary or several practitioners

The first two options depend on someone remembering and having the time. On busy days, reminders are the first thing to slip.

What a good reminder needs

1. Sent at the right time: usually the day before. For first visits or long treatments, a few days before as well.
2. Reply buttons: I'll be there and I can't make it. If patients have to type or call to cancel, many will simply not turn up.
3. Only the information needed: date, time and clinic name. The treatment isn't necessary: it's health data and best left out.
4. What happens when someone cancels: the slot must be freed immediately and reception needs to know so they can offer it to another patient.

Example message:

Hi Laura, this is a reminder of your appointment at Smile Dental Clinic tomorrow, Thursday 2 October, at 10:30. Will you be able to come? [ I'll be there ] [ I can't make it ]

WhatsApp Business API: what you should know

Automatic reminders use the official WhatsApp Business API (from Meta), usually through a provider or built into your system:

• The clinic's own number registered with Meta and verified in the clinic's name.
• Approved templates: messages the clinic starts (like a reminder) must use a template approved by Meta. Appointment reminders fall under utility messages.
• Cost per message: Meta charges for each template message sent, with rates by country and message type. For reminders the cost is usually a few cents per message; check the current rate before deciding.
• Replies: when the patient taps I'll be there or I can't make it, the answer comes back to the system and the diary can be updated automatically.

What about GDPR?

Patient data is especially sensitive, so it pays to get it right from the start:

• Tell patients you'll send reminders by WhatsApp (for example, when you ask for their mobile number on their record) and respect anyone who prefers another channel.
• Minimal messages: date, time and clinic. No diagnoses or treatments.
• Avoid reception's personal phone: mixing patient conversations on an uncontrolled device (cloud backups, staff changes, a lost phone) is an unnecessary risk.
• A data processing agreement with the provider that sends the messages, and check where the data is stored.
• Record this processing in your record of processing activities and, if you have a data protection officer, ask them.

Beyond the reminder

Once reminders are automated, adding other pieces is easy:

• A review request after the visit, to get more Google reviews without breaking Google's rules. We explain it in how to get more Google reviews for your clinic.
• Reactivating patients who haven't been in for their check-up for months.
• A waiting list to offer freed-up slots automatically.

And if you want to put numbers on what no-shows cost you today, use the missed appointments calculator. There are more ideas in how to reduce patient no-shows.

Try it like your patients would

At Onlitions we set up reminders with one-click confirmation, connected to the clinic's diary, with the data on a private server in the EU. On a 30-minute video call we book a test appointment with your clinic's name and you receive the messages exactly as your patients would. See how it works.

This article is for information only; for specific data protection questions, ask your data protection officer or adviser. Updated September 2026.