Roots Through Recovery: HIPAA Compliant Texting

Roots Through Recovery, an addiction treatment center in Long Beach, California, was weeks from losing its online SMS provider on January 1 2026. Notifyre's team guided the center through every step of a compliant replacement: a signed BAA, an approved 10DLC campaign, and a working API integration, with no changes to the center's privacy policies or intake forms. The system was live before the cutoff, and today carries 6,000 to 10,000 SMS messages every month. Here's how hands-on support got a small clinical team through a deadline that left no room for a second attempt.

How Roots Through Recovery use SMS

Roots Through Recovery provides personalized addiction treatment programs from its Long Beach facility. Behind the clinical work sits a steady flow of routine messaging: appointment reminders, virtual group session coordination, facilitator updates, and the occasional SMS alert. Text messaging is how much of that day-to-day communication happens, and it needs to keep happening without interruption.

Finding a HIPAA Compliant SMS Provider

Roots Through Recovery wasn't shopping around for the sake of it. Their existing provider was going away at the start of the new year. Miss the date and patient-facing communication would simply stop.

The deadline was made harder by what compliant business texting in the United States actually involves. Any vendor handling patient information on a healthcare provider's behalf must sign a Business Associate Agreement, or BAA, the contract that makes them legally accountable for protecting that data under HIPAA. Plenty of SMS service providers won't sign one at all; others treat it as a weeks-long legal exercise.

Then there's 10DLC, the registration system US mobile carriers use to verify who is sending business text messages and why. Businesses register their brand, register their messaging campaign, and link an approved number, each step with its own requirements. A rejected application goes to the back of the queue, and for a small clinical team, one stalled application is the difference between making the deadline and missing it.

Why They Chose Notifyre's HIPAA Texting Service

The Notifyre team walked the IT Director through every stage personally: account setup, brand registration, campaign registration, and choosing and linking the 10DLC number. When questions came up about opt-in methods and what the carriers would accept, he got direct answers about the next step, not just a link to a help article.

The registration was approved without a single change to the center's privacy policies or intake forms. Anyone who has sat through a legal review of an intake form (HIPAA compliant Text Messaging consent form) knows how many weeks that saved. The BAA was coordinated quickly enough that paperwork never became the bottleneck.

The Roots Through Recovery team connected Notifyre's online SMS service to their own systems through Notifyre's SMS API, and the integration was sending and receiving messages as part of the initial setup, with no drawn-out development phase.

Proactive Account Management

After launch, the account manager, Ryan, checked back in unprompted. The IT Director confirmed the integration was working well, with no issues to report. That follow-up reflects how Notifyre's support runs generally: a real person across phone, email, and live chat, rated 4.9 out of 5 for support on SourceForge.

What Makes Notifyre HIPAA Compliant

Notifyre's platform is HIPAA compliant by default. Every account includes the security and privacy measures needed to protect Protected Health Information, or PHI, the patient data HIPAA exists to protect, so organizations can send and receive messages compliantly from day one:

• Encryption: data is AES 256-bit encrypted at rest and in transit, and Notifyre's website and application run over HTTPS with SSL/TLS
• User permissions: messaging functions are restricted to authorized users only 
• Multi-factor authentication: adds a second verification step at sign-in 
• Audit trails: all messaging activity is logged for compliance monitoring 
• Business Associate Agreement: signed as part of onboarding, covering HIPAA data protection responsibilities 
• Secure integrations: the SMS API and connected workflows authenticate with API tokens
• ISO 27001 certified: Notifyre meets international security best practices

Account-level protections back this up: strong password requirements, automatic logout after 24 hours of inactivity, login attempt tracking, and card payments processed by Stripe, which is PCI certified.

Need Support With HIPAA Compliant Texting or 10DLC Registration?

Roots Through Recovery faced a deadline, a BAA requirement, and a registration process with no room for error, and came out the other side sending up to 10,000 messages a month with Notifyre. If your organization needs HIPAA compliant texting set up fast, the Notifyre team helps you through the SMS compliance work that usually slows healthcare providers down, from signing your BAA to getting your 10DLC registration approved. Book a demo or sign up today!