WhatsApp Groups or Broadcasts for Patients: The Privacy Problem

Picture a gynaecologist starting a WhatsApp group for her pregnant patients. It's a kind idea. She shares diet tips, reminds them about scan dates, and answers general questions. The group grows to 180 women.

Then one member's husband starts messaging other members privately, asking about their deliveries. Another member finds her neighbour in the group and learns she is pregnant before the family has announced it. The neighbour is furious, and she blames the clinic.

Nobody does anything wrong on purpose. The problem is the format. A group puts every patient's number, and the fact that they are your patient, in front of everyone else in it.

Why are WhatsApp groups a privacy problem for clinics?

Because in a normal WhatsApp group, every member can see every other member's phone number. They can tap on any name, save the number, and message that person directly.

Now think about what being in your group says. "This person is pregnant." "This person has diabetes." "This person is seeing a urologist." "This person is an IVF patient." For many conditions, that is exactly the information a patient would never want a stranger, or a neighbour, to have.

On top of that, groups create problems you cannot control:

• Members post their own reports and photos, and others see them.
• Members give each other medical advice that the doctor never approved.
• Someone forwards a screenshot outside the group.
• Unhappy members complain in front of 180 people.
• Anyone in the group can add others, and the list keeps growing.

The doctor's good intention turns into a privacy risk with the clinic's name on it.

What are the safer options?

There are three main formats. Here is how they compare for patient use.

A broadcast list sends your message to each person individually. It looks like a normal one-to-one message. Nobody sees who else received it, and replies come only to you. One limitation: broadcast messages only reach people who have saved your clinic number in their contacts.

A WhatsApp channel is one-way. You post, followers read. Followers cannot see each other, and they cannot reply in the channel. It suits general education: a monsoon health note, a short video from the doctor. It does not suit anything personal, because it is not personal.

For anything about the patient's own care, scan dates, reports, follow-ups, use private one-to-one messages from your clinic number, ideally through a CRM so there is a record.

What can a clinic still send in a broadcast or channel?

Treat both as a place for education and clinic notices, never promotion.

• Clinic timing changes and doctor leave.
• Short educational notes in the doctor's own voice.
• Seasonal health advisories.
• Links to the doctor's educational videos, labelled if AI helped make them.

Leave out offers, packages, patient stories, patient photos and anything asking for ratings. The NMC Guidelines on Ethical Advertising and Public Communication dated 6 October 2026 are clear that promotion like this is out. Read them yourself before you post. And only send broadcasts to patients who agreed to receive them.

What should you do with patient groups you already run?

Do not just delete the group overnight. Members will be confused, and some depend on it. Do it in five steps:

1. Change the group settings today so only admins can send messages, and only admins can add members. That stops new exposure immediately.
2. Post a short, warm explanation. For example: "To protect everyone's privacy, we are moving our updates to a private format where your number is not visible to others. You will still get every update from Dr Kulkarni."
3. Offer the new format. Share the channel link, or ask members to save the clinic number and reply YES to join the broadcast list.
4. Give a date. "This group will close on 30 June." Then keep the date.
5. Close the group by removing members and exiting, and note in your privacy log that it was closed.

Example: say a family physician in Kanpur runs a group of 240 patients with diabetes. On day one, she switches it to admin-only. Over two weeks, about 190 save the clinic number and reply YES. On the closing date, the group shuts. Those 190 now get the same monthly education note privately, and none of them can see each other. The other 50 can still message the clinic any time.

Are communities any better?

WhatsApp communities have an announcement group where members' numbers are more protected than in an ordinary group. But communities also contain normal groups where numbers are visible, and the settings are easy to get wrong. For a clinic, I would keep it simple: channel for education, broadcast or CRM for anything sent to individual patients. Fewer moving parts, fewer mistakes.

Who should own this decision in the clinic?

The doctor, with the practice manager. Write it into your patient data and privacy SOP: "We do not run patient WhatsApp groups." Train every staff member on it, because the next group is often started by a well-meaning coordinator. Our CRM, WhatsApp and AI team sets up private broadcast lists from your patient records, and our retention and reactivation work shows how to keep patients connected without exposing anyone. For condition-specific examples, see the gynaecology page and the family medicine page.

The short version

• In a WhatsApp group, every member sees every other member's number. That exposes your patients.
• Use broadcast lists or a CRM for messages to individual patients, and channels for general education.
• Never use groups or broadcasts for offers, patient stories or rating requests.
• Fix existing groups now: admin-only, explain, offer the private option, set a date, close.
• Put "no patient groups" into your privacy SOP and train every staff member on it.