AI receptionist options for medical and dental practices

Confirm a signed BAA and PHI-handling process before sending any patient info through the receptionist.

Collect only the info you actually need; keep PHI on file limited to what your workflow requires.

The receptionist must integrate cleanly with your PMS or calendar — verify writes, not just reads.

Emergencies and after-hours clinical questions must escalate to on-call staff, not sit in a voicemail queue.

Most new-patient calls happen outside business hours. Voicemail captures a fraction of those, and most callers move on to the next practice on the search results page.

Between 8–10 a.m., the front desk is checking in patients, handling copays, and answering calls simultaneously. Hold time creeps past 90 seconds and patients hang up.

Hygiene recall and appointment confirmations slide when the team is busy. No-show rates climb 10–20% when confirmations are manual and inconsistent.

If your team has one Spanish-speaker and they're at lunch, Spanish-speaking patients get a partial conversation or none at all.

"Do you take my insurance?" is the single most common new-patient question and the one your front desk least wants to handle live.

Clinical staff get pulled out of operatory chairs and exam rooms for calls that should have been triaged at the front desk.

A two-dentist GP practice sets the AI to handle every call between 5 p.m. and 8 a.m. and on weekends. The script asks for chief complaint (toothache, cleaning, cosmetic), insurance carrier, last-visit timing, and preferred appointment window — then books into Open Dental via the vendor's integration. Pain-related calls get an offer for the first morning slot and an SMS confirmation; cosmetic consults get scheduled with the doctor who handles them.

A three-provider primary care clinic routes calls to the AI only when the front desk is already on two lines. The AI handles confirmations, refill request intake, simple rescheduling, and directions — and warm-transfers anything clinical or insurance-specific to a live staff member when one is free.

A three-location dental group uses the AI to make outbound recall calls 30 days before a patient is due, with SMS fallback. Patients can confirm, reschedule, or request a callback — all without front-desk involvement. The team gets a clean daily report of confirmed, rescheduled, and exception calls.

A med spa with consult-required services (injectables, laser, body contouring) uses the AI to qualify inbound leads from Instagram and Google ads, screen for contraindications via pre-scripted questions, and book paid consults directly into the provider calendar. Refund and complaint calls are flagged to the office manager rather than handled by the AI.

Any vendor that creates, receives, maintains, or transmits PHI on your behalf is a Business Associate and must sign a BAA before you go live. No BAA, no PHI. If a vendor pushes back or charges extra for the BAA, that's a signal — most healthcare-aware providers have a standard BAA ready to send.

HIPAA's minimum necessary rule says you should collect only the PHI required for the purpose. Build intake scripts that capture what scheduling actually needs (name, DOB, contact, insurance carrier, reason for visit) — not full clinical history. Clinical detail belongs in the chart, not in a third-party transcript.

Call recordings and AI-generated transcripts that contain identifiable patient information are PHI. They must be encrypted at rest, access-controlled, retained per your written retention policy, and disposed of securely when no longer needed.

About a dozen US states require all-party consent to record. In those states, your greeting must disclose recording before any PHI is spoken. Most vendors support a jurisdiction-aware greeting — confirm during the demo.

Many AI receptionists rely on third-party speech-to-text and LLM providers as subcontractors. Confirm in writing which subcontractors process PHI, that they're covered under the BAA, and where audio/transcripts are stored geographically.

An AI receptionist is not a clinician and must not provide triage. The first script branch must detect emergency keywords and route the caller to 911 messaging plus an immediate page to your on-call provider per your protocol.

Your BAA must specify the vendor's breach notification timeline. Under HIPAA, you have a hard 60-day window from discovery; vendors that need 30+ days to notify you eat most of that. Look for 5–10 business-day vendor commitments.

Outbound SMS confirmations and recall calls trigger TCPA. Make sure you have prior express consent on file, that opt-out instructions are honored automatically, and that confirmation messages don't include PHI beyond what's strictly necessary (e.g. "Reminder: appt Tue 10am — reply C to confirm" rather than the procedure name).