Carriers and the national Campaign Registry expect to see language in your privacy policy that states that mobile information and opt-in consent will not be shared with third parties or affiliates for marketing or promotional purposes.
This non-sharing wording must clearly apply to "mobile numbers," "SMS consent," and "third parties" and not just email or personal data in general.
The following additional privacy policy language is also required:
• Describe how recipients can opt-out or get help when needed ("Reply STOP to opt out, or HELP for help," or call your organization's phone number).
• "Message frequency varies" (or your usual cadence)
• "Message and data rates may apply."
Your Terms page should cover SMS (short message service) rules for people who opt in to receive text messages from your organization. You can keep your existing Terms structure, just add or tighten the SMS / text messaging section if it is thin.
Required language for your Terms includes:
• Organization name that clients will see on texts to identify yourself as the sender
• Short organization description (who you are)
• How people opt in (intake form, website checkbox, keyword START, written consent, verbal consent over the phone, etc.)
• What kinds of text messages they should expect to receive (appointment reminders, care follow-up, etc. — match your real use case)
• Message frequency (for example “message frequency varies” or “up to X messages per week”) or a recurring-message disclosure
• Message and data rates may apply
• Complete opt-out instructions — reply STOP to opt out and HELP for help (display STOP and HELP in bold so they are easy to spot)
• Customer support contact (email, phone, or web contact page)
• Link or reference to your Privacy Policy
• "Delivery is not always guaranteed (delays and failures can happen)."
• "Wireless/mobile carriers are not liable for delayed or undelivered messages."
Your texting consent form (or proof of consent) should include:
• Explicit SMS messaging consent - a clear, intentional action: checks a box, signs a form, texts START, or completes a published consent page. (You cannot use a first unsolicited text to ask them to opt in.)
• Message frequency
• Description of what types of messages they will receive (appointment reminders, secured messages for client portal access, general care, etc)
• "Message and data rates may apply."
• Opt-in instructions (how they agree)
• Opt-out instructions (STOP / HELP)
• "Mobile and consent information is not shared or sold to third parties for marketing or promotional purposes."
• "Consent is not required to receive services."
If possible, add a checkbox or clear acknowledgment line specifically for SMS/text messaging, even on a paper or PDF form.
