WhatsApp has hundreds of millions of users in India. Most patients between 25 and 50 prefer messaging a hospital over calling. Open rates for WhatsApp Business messages also tend to run far higher than email open rates in healthcare.
If your hospital doesn't have a structured WhatsApp marketing and communication system, you're operating with a significant competitive disadvantage.
But WhatsApp in healthcare comes with real complexity: patient privacy, data handling, consent requirements, and the risk of your number getting banned for spam. This guide covers the complete setup — including what most agencies won't tell you.
WhatsApp Business vs WhatsApp Business API: Which One You Need
There are two WhatsApp products for businesses. Most hospitals need the API.
WhatsApp Business App (free): Works like a regular WhatsApp with a business profile. One user at a time, no automation, no CRM integration, max 256 people per broadcast. Fine for a single-doctor clinic.
WhatsApp Business API (paid, through a BSP): Multiple agents on one number, full automation, CRM integration, unlimited broadcasts to opted-in contacts, chatbot capabilities. This is what you need for a hospital with 10+ patient interactions per day.
Cost: ₹8,000–₹25,000/month depending on your BSP (Business Solution Provider) and message volume.
Reputable BSPs in India: Interakt, AiSensy, Wati, Zixflow, and Gupshup. Each offers slightly different features — Interakt and Wati are the most commonly used for healthcare.
Step-by-Step Setup
Step 1: Get a Dedicated Number
Never use the personal number of a doctor or staff member. Get a dedicated number — ideally a landline number converted to WhatsApp Business (yes, this is possible through most BSPs).
Why a dedicated number matters: If the employee with the hospital's WhatsApp leaves, you lose the history and contacts. A dedicated number owned by the hospital stays with the hospital.
Step 2: Set Up Your Business Profile Completely
Your WhatsApp Business profile is the first thing patients see. Include:
- Official hospital logo as profile picture
- Business name exactly as registered (for verification purposes)
- Business description (max 256 characters — make it count)
- Hours of operation for patient communication
- Website URL
- Location (for local search)
Step 3: Apply for Green Tick Verification
The green tick (Official Business Account) on WhatsApp is the equivalent of a blue tick on Instagram. It signals legitimacy.
Requirements:
- A verified Facebook Business Manager account
- Your business listed on Google Knowledge Panel
- Media coverage or Wikipedia presence helps
- 1,000+ contacts is recommended (not required)
Timeline: 2–6 weeks. Approval is not guaranteed but having the green tick can meaningfully increase response rates in healthcare contexts.
Step 4: Build Your Message Templates
WhatsApp API requires pre-approved message templates for outbound messages (messages you initiate). Templates go through Meta's approval process — usually 24–48 hours.
Essential templates for hospitals:
Appointment Confirmation: "Hello {{1}}, your appointment with {{2}} at {{3}} on {{4}} is confirmed. Please arrive 15 minutes early. If you need to reschedule, reply to this message or call {{5}}."
Appointment Reminder (24 hours before): "Reminder: Your appointment at {{1}} is tomorrow, {{2}} at {{3}}. Need to reschedule? Reply here."
Lab Report Ready: "Your lab reports from {{1}} are ready. Access them here: {{2}}. For any queries, reply to this message."
Post-Discharge Follow-Up: "Hello {{1}}, we hope you're recovering well after your procedure at {{2}}. Your follow-up appointment is scheduled for {{3}}. Any concerns? Reply here."
Missed Appointment Recovery: "We noticed you missed your appointment on {{1}}. We'd like to reschedule at your convenience. Tap here to book a new slot: {{2}}"
Step 5: Build Automation Workflows
The power of WhatsApp API is automation. These are the workflows every hospital should have running:
Incoming inquiry chatbot: Patient sends "Hi." Bot responds with a menu: "1. Book Appointment, 2. Lab Reports, 3. Doctor Information, 4. Billing Enquiry." Patient selects 1. Bot asks for preferred specialty and date. Bot books a tentative slot and routes to human coordinator for confirmation.
Appointment confirmation sequence: Form submission triggers automatic WhatsApp confirmation within 2 minutes. 24-hour reminder. 2-hour reminder (for morning appointments).
Post-visit follow-up: 24 hours after the appointment, a check-in asking whether they have questions about their care, with a link to a private feedback form. Don't automate review requests in a doctor's name: NMC's 2026 guidelines say a doctor shall not request patient reviews for professional promotion on social media (Expl. V to para 3.2). If the hospital mentions its Google profile at all, send the same neutral message to every patient, with no incentive and no filtering by satisfaction.
Discharge follow-up: Triggers based on discharge date in the hospital management system. Day 1, Day 7, Day 30 follow-ups with appropriate messages.
Compliance and Privacy: The Non-Negotiable Rules
Healthcare WhatsApp communication in India operates under three frameworks:
- WhatsApp's own Business Policy
- The Digital Personal Data Protection (DPDP) Act, 2023
- The National Medical Commission's rules — the IMC (Professional Conduct, Etiquette and Ethics) Regulations 2002, read with NMC's ethical advertising guidelines of 6 October 2026 (the NMC replaced the Medical Council of India in 2020)
The critical compliance requirements:
1. Explicit opt-in is mandatory. Under the DPDP Act, you cannot send any WhatsApp message to a patient without documented consent. Collect consent at:
- The appointment booking form (checkbox: "I consent to receive appointment updates and health tips on WhatsApp")
- The hospital registration desk (paper or digital consent form)
- Via WhatsApp itself (send a consent request message to existing contacts — they must actively agree)
Never bulk import phone numbers from your existing patient database and start messaging without re-obtaining consent under the DPDP framework.
2. Health information must be transmitted securely. Lab reports, prescriptions, and medical records sent over WhatsApp must not contain unnecessary personal information. Patient ID rather than full name + date of birth + diagnosis in the same message.
3. Marketing messages require separate consent. Consent for appointment reminders ≠ consent for marketing messages (a new-service announcement, say). Get separate opt-in for marketing content.
4. Unsubscribe must be easy. Every marketing message must include an easy opt-out. "Reply STOP to unsubscribe" at the end of each message.
5. Never buy WhatsApp number lists. This is both a DPDP violation and grounds for permanent WhatsApp account ban. The only numbers you can message are those who have explicitly opted in.
6. Broadcasts are advertising under NMC's rules. The 2026 guidelines name WhatsApp as an advertising medium (para 3.5) and list digital mass solicitation among serious violations (para 10.1). No discounts, offers or free procedures (para 8.1(x)), and any doctor named in a message carries their name, qualifications and SMR/NMR registration number (Expl. III and IV to para 3.2). The full clause-by-clause summary is in our NMC guide.
