An urgent care clinic runs on shifts, so the staff who start a problem are rarely the staff who finish it. Team chat that signs a Business Associate Agreement gives providers, nurses, x-ray and the front desk one place for handoffs, pending results and supply alerts, with an audit trail the group text never had. A 10 to 15 person clinic can set it up in a day.
Why shifts make urgent care different
A primary care office has the same six people every day. An urgent care has a rotating cast: a physician or nurse practitioner on a 12-hour shift, a physician assistant covering the weekend, two or three medical assistants (MAs) or nurses, a radiology tech who may split time between two sites, a front desk and registration person, and a handful of per-diem staff who fill holes. The medical director and the clinic manager hold it together from a distance.
The patient who was waiting on a send-out lab at 7pm is somebody else's problem at 7am. If the handoff lived in a group text on the night provider's phone, the morning provider never saw it.
Four handoffs that happen every day
- End of shift. The evening provider lists what is still open: two send-out cultures, a splinted wrist that needs an orthopedic referral, a patient who left before the x-ray over-read came back.
- Result callbacks. The radiologist's over-read arrives the next morning and disagrees with the provider's read. Someone has to call the patient today, and the provider who saw the patient is off.
- Supplies. Rapid strep tests are down to one box, the splint cart is missing two sizes, and the x-ray processor needs service. Whoever notices should be able to tell everyone in one message.
- Staffing. A per-diem MA calls out for Saturday. The manager needs a replacement by tonight without putting patient details in the staffing message.
What is PHI in a handoff, and what is not
PHI, protected health information, is any detail that identifies a patient and relates to their care or payment. A handoff that says 'wrist fracture, 42-year-old male, seen at 6:40, needs ortho referral' is PHI even without the name; the time, age and injury identify one person from the day's log. A supply note or a staffing request is not PHI unless somebody adds a patient to it.
Your clinic is a covered entity under HIPAA because it bills insurance electronically, which puts the Privacy and Security Rules on the clinic itself. Any vendor that stores your messages is a business associate and must sign a Business Associate Agreement (BAA), the written contract committing it to protect PHI under HIPAA's rules, before it handles a single message (45 CFR 164.502(e)). Carrier SMS, WhatsApp and Facebook Messenger do not sign one, so the handoff above cannot live there.
A channel map for a 10 to 15 person clinic
| Channel | Who is in it | What goes there |
|---|---|---|
| #shift-handoff (private) | Providers, nurses, MAs on shift | Open items at end of shift, pending results, patients to recheck |
| #results-callbacks (private) | Providers, charge nurse | Over-read discrepancies, send-out labs, who calls whom today |
| #providers (private) | Physicians, PAs, NPs, medical director | Clinical questions, protocol updates, coverage swaps |
| #supplies | Everyone | Low stock, equipment service, orders placed, no patient details |
| #front-desk | Registration, manager | Wait times, insurance questions, forms, walk-in volume |
| #staffing | Manager, all staff | Call-outs, open shifts, per-diem confirmations |
| #managers-private | Medical director, clinic manager, owner | Hiring, payer contracts, incidents, vendor issues |
Mistakes urgent care teams make
- A group SMS of every per-diem provider for shift coverage that slowly turns into 'can someone call the strep kid from last night?'. Carrier texts are not encrypted, and the clinic cannot remove a message or a former per-diem from the thread.
- A WhatsApp group per site, with photos of x-rays and discharge paperwork. WhatsApp signs no BAA, and departed staff keep the history.
- Facebook Messenger between front desk staff for schedule swaps, which absorbs patient complaints and names within weeks.
- A handoff written in one provider's personal notes app and texted to the next, so the clinic has no record at all.
Shift work makes all of this worse, because the people reading the message were not there when it was written. The shift handoff template shows a format that keeps PHI inside the tool and out of the first line.
Setting it up in a day
- The clinic manager creates the workspace and sends every invitation by work email, including per-diem staff. Invite-only means nobody is in the handoff channel by accident.
- Create the channels above. Everything with patient content is private; #supplies and #staffing are open to all.
- Providers are managers of #shift-handoff and #results-callbacks; nurses and MAs are members; the front desk is in neither.
- Per-diem staff get the member role in the channels they need and are removed the day they stop picking up shifts. A per-diem who only needs to read #staffing can be a viewer there.
- Turn on passkeys and tell everyone the app locks after 15 minutes idle, which covers a shared workstation at the nurses' station.
- Post the handoff format in the #shift-handoff topic and use it from the first day.
Yodl prices this per location: $10 a month for five users, 20 GB of files and a signed BAA, with each extra person at $2 a month. A 14-person clinic pays $28 a month, and a second site is another $10 with five more users. Per-diem staff who come and go are added and removed without a contract change.
What to confirm before you switch
Three things matter most for urgent care: a signed BAA on the plan you buy, an audit log with export so you can show who read a handoff, and notifications that show no message content on a lock screen. Yodl has all three, plus retention settings and a legal hold for the day a complaint arrives. Like Slack and Microsoft Teams it is encrypted in transit and at rest rather than end-to-end, which is what makes search and audit possible.
When the next shift should not depend on last night's phone, Yodl is $10 a month for five people, with a signed BAA on every plan.
In urgent care the risk is the handoff that lives on one person's phone. Move it to a private channel inside a BAA-covered tool, and the morning provider, the per-diem and the manager all see the same thing.
Frequently asked questions
Can per-diem providers be in the same chat as full-time staff?
Yes. Invite them by work email, limit them to the channels they need, and remove the account when they stop taking shifts. The clinic keeps the messages either way.
Is a handoff without a patient name still PHI?
Usually, yes. Age, time seen and the injury point to one person on the day's log. Keep every handoff inside the BAA-covered tool.
Should the front desk see the shift handoff?
Not usually. Keep #shift-handoff private to clinical staff and put what the front desk needs, such as a patient to expect back, in #front-desk without clinical detail.
What about two sites?
Create a channel set per site and keep #providers and #managers-private shared. Each location is a separate $10 plan with its own five users.