A mental health group practice can use team chat for scheduling, intake matching, supervision and crisis coordination, as long as the tool signs a Business Associate Agreement and the practice keeps psychotherapy notes out of it entirely. Private channels, invite-only access and an audit log matter more here than in almost any other kind of practice.
Why chat is more sensitive in a mental health practice
Every practice handles protected health information (PHI): anything that identifies a client and says something about their care. In a mental health practice the diagnosis itself carries stigma, and so does the simple fact of being a client. A first name plus 'no-showed again, still drinking' does more damage in the wrong hands than most medical details.
HIPAA also gives psychotherapy notes extra protection. Those are the therapist's own process notes, kept separate from the rest of the record. They should never be typed into a chat tool, covered by a BAA or not. Keep them in your record system, and treat chat as the place for logistics and brief clinical coordination.
Who is on the team, and where they are
A group practice of 6 to 15 people usually has licensed therapists (LCSWs, LPCs, LMFTs, psychologists), one or two associate clinicians working toward licensure under a supervisor, a clinical supervisor, an intake coordinator who answers the phone and matches new clients, a biller or practice manager, and an owner who still carries a caseload. On any given day half of them may be seeing clients by telehealth from home, and the practice may have two offices. People need an answer in the ten minutes between sessions, which is why group texts take over.
Situations where staff message each other
- Safety concern after a session. A therapist ends a telehealth session with a client who disclosed suicidal thoughts, has worked through the safety plan, and now needs to tell the supervisor, document, and ask someone to cover the next client.
- Intake matching. The intake coordinator has a new adult client who needs an evening slot, has a particular insurance and wants a therapist experienced with OCD. Who has an opening?
- Supervision. An associate wants ten minutes with the supervisor about a case before Thursday, and the supervisor needs to log the supervision hour.
- Office logistics. Room 3 at the north office is double-booked, the white noise machine is dead, or the telehealth platform is down for one clinician.
Chat is not an emergency line. In a true crisis the clinician acts directly, by phone and by the practice's emergency procedure. Chat is for the coordination that follows.
Where the PHI line falls
A practice that bills insurance electronically is a covered entity, which means the HIPAA Privacy and Security Rules apply to it directly. A vendor that stores your messages is a business associate and must sign a Business Associate Agreement (BAA), the written contract in which it agrees to protect that information under HIPAA, before it handles PHI (45 CFR 164.502(e)).
Inside a BAA-covered tool, the practical line looks like this:
- Fine in #intake: 'New adult client, evenings only, needs OCD experience, has Aetna. Who has a slot?' No name needed yet.
- Fine in a private clinical channel: 'Client J.R. safety planned, supervisor notified, please cover my 4pm.' Initials plus a clear action.
- Never in chat: session content, process notes, anything that belongs in the psychotherapy notes or the progress note.
- Never anywhere: a client's name on personal SMS, WhatsApp or Facebook Messenger, because those tools sign no BAA.
A channel map for a group practice
| Channel | Who is in it | What goes there |
|---|---|---|
| #intake | Intake coordinator, all therapists | New client needs, openings, waitlist, insurance questions |
| #clinical-consult (private) | Licensed therapists, supervisor | Brief case coordination, coverage requests, safety follow-ups |
| #supervision-name (private) | One supervisor and their associates | Supervision scheduling, hour logs, reading assignments |
| #telehealth-tech | Everyone | Platform outages, link problems, headset and camera issues |
| #office-main, #office-north | Staff at that location | Rooms, keys, noise, parking, deliveries |
| #billing (private) | Biller, owner, therapists | Session codes, claim denials, sliding scale questions |
| #owners-private | Owners | Hiring, contracts, payroll |
The mistakes group practices usually make
- A therapists-only WhatsApp group that started as social and now holds 'is anyone free to take a crisis call?' with the client's name. WhatsApp does not sign a BAA, and a therapist who leaves keeps the whole history.
- Personal SMS between an associate and the supervisor about a case, because it is faster than email. SMS is unencrypted and the practice cannot retrieve or delete it.
- A Facebook Messenger group for the front desk and the biller, because they already used it for shift schedules.
Each of these is reasonable from the inside. The fix is a tool that is just as fast and that the practice controls. See HIPAA texting rules for staff for the SMS side.
Setting it up for a practice of 6 to 15
- The practice manager creates the workspace and is the only admin who sends invitations, each to the clinician's practice email address.
- Create the channels in the table. Every clinical channel is private; each supervision channel is private to one supervisor and their associates.
- Give therapists the manager role in #clinical-consult, associates the member role, and the biller a viewer role there if she needs to see coverage changes but not post.
- Turn on passkeys and tell everyone the app locks itself after 15 minutes of inactivity, useful for a laptop at a kitchen table.
- Write a two-line policy: no session content in chat, initials until a name is necessary, all client questions in private channels.
- Close the WhatsApp group on a fixed date and have the owner leave it last.
With Yodl this costs $10 a month per location for five users, plus $2 for each additional person, and the BAA is signed on that plan. The second office is another $10 and brings five more users. The admin panel also has retention settings and a legal hold for the day a records request or a licensing board inquiry arrives.
What to expect from the tool
Look for a signed BAA on the plan you buy, invite-only membership, private channels, roles, an exportable audit log, retention controls and an inactivity lock. Expect encryption in transit and at rest rather than end-to-end encryption: compliant team chat, Yodl included, is built that way on purpose so that search, retention and audit work. It is the same model Slack and Microsoft Teams use.
If that fits your practice, Yodl is $10 a month for five people, includes the signed BAA.
In a mental health practice the fact of being a client is itself sensitive. Keep psychotherapy notes out of chat completely, keep everything else inside private channels covered by a BAA, and give the supervisor and owner the controls to prove it.
Frequently asked questions
Can therapists discuss a client in team chat?
Brief coordination, yes, inside a tool covered by a BAA and in a private channel limited to clinicians. Session content and process notes do not belong in chat at all; they belong in the record.
Are psychotherapy notes treated differently under HIPAA?
Yes. Psychotherapy notes, the therapist's separate process notes, get extra protection and need specific authorization for most disclosures. The simplest policy is to keep them in the record system and never in chat or email.
Our clinicians work from home on telehealth days. Does that change anything?
It raises the device risks: shared laptops, family nearby, phones on the counter. Passkeys, an inactivity lock and push notifications that show no message content cover most of it.
What happens to messages when a therapist leaves?
In an invite-only workspace the admin removes the account and access ends the same day. The messages stay with the practice under your retention settings instead of leaving on a personal phone.