Invite the new hire to the exact email address you chose, give them the smallest role that lets them do the job, and spend twenty minutes walking them through where patient information goes and where it never goes. On their last day, remove the user before they leave the building, reassign anything they managed, and write down the date. The tool keeps their messages for the record.
Why onboarding is a HIPAA step, not just an IT step
The first week is when habits form. A new front-desk hire who gets a text from a coworker about a patient on day one will assume that is how the office works. If instead her first message arrives in the approved tool, with a topic line explaining what belongs there, she will copy that. Onboarding is where your written policy becomes the actual practice.
The stakes are real because almost everything staff say about patients is protected health information (PHI): any detail that identifies a patient and relates to their health, care or payment. Your practice is a covered entity under HIPAA, responsible for that information, and the chat vendor handling it must have signed a Business Associate Agreement (BAA), the contract in which a vendor accepts HIPAA obligations. A tool with a BAA is only safe if the people using it know the rules.
Before day one: the invitation
Keep the workspace invite-only. In Yodl, people can only join through an emailed invitation to the exact address you entered, which means the question "what email should I use?" gets answered by you, not by the new hire. Use the work address if the practice provides one. If staff use personal email, write down which address you invited so offboarding is not a guessing game later.
- Decide the role before you send the invite: Member in the channels they work in, Viewer in channels they only need to follow, Manager only if they will run a channel.
- Add them to the few channels they need on day one, not all of them. People read what they are added to.
- Have them set up a passkey (Face ID or Touch ID) at the first sign in, so there is no shared password to forget or reuse.
- Send the invite the day before they start, so the verification email is waiting.
Day one: the 20-minute walkthrough
Do this sitting next to them, on their phone and on a computer, because they will use both.
- Sign in and confirm the passkey works. Show the 15-minute inactivity lock so the first lock does not look like a bug.
- Open each channel and read the topic line out loud. The topic says what belongs there.
- Show one good handoff message and one good thread reply, then have them post a test message in #ops.
- Explain @mentions: use one when you need a specific person, not for emphasis.
- Show notifications. Point out that the push notice never contains the message text and that the "important message" email only tells you to open the app. That is on purpose.
- Walk through the lost-phone rule: tell the office manager immediately, and the manager removes access. Nothing is lost, because nothing lives only on the phone.
- Confirm they know the approved tool is the only place for patient details. No SMS, WhatsApp, iMessage or personal email, even with a coworker, even once.
The three rules every new hire should repeat back
Three rules fit on an index card. Twelve do not. Everything else in your policy can be looked up later.
Roles: give the least access that gets the job done
Role choices in a small office are simple once you think in terms of jobs rather than seniority.
| New hire | Member in | Viewer in | Not in |
|---|---|---|---|
| Front desk coordinator | #front-desk, #shift-handoff | #announcements, #clinical | #owners-private |
| Per-diem hygienist or nurse | #clinical, #shift-handoff | #announcements | #ops, #owners-private |
| Bookkeeper (part time) | #owners-private | #ops | #front-desk, #clinical |
| Associate provider | #clinical, #front-desk | #announcements, #ops | #owners-private |
| New office manager | Manager of most channels | Nothing read-only | Workspace admin after the probation period |
Viewer is the underused role. Someone who can read #clinical but not post in it gets the context without adding noise, and the membership change is recorded like any other.
Offboarding: the checklist that keeps PHI from walking out
Departures are where practices get hurt, because the group text keeps working after the person is gone. A workspace with admin controls fixes that in one step, but only if someone takes the step.
- Remove the user from the workspace on their last day, before they leave the building, not at the end of the week. Access ends on every device at once.
- If they were a channel Manager, hand that role to someone else first, so no channel is left without a manager.
- Check that they were not running any bot or integration under their own account.
- Confirm with the team that no side channel existed. If someone admits to a WhatsApp group, this is the moment to close it.
- Do not delete their messages. Retention rules keep the history as part of the practice's records, and legal hold exists for a reason.
- Export the audit log entry for the removal and file it with the employee's exit paperwork, with the date and who did it.
Yodl's audit viewer exports to CSV, so the last step takes a minute. The point is a paper trail: if anyone ever asks when access ended, you can answer with a timestamp instead of a memory.
Keep the whole thing boring
The best onboarding is unremarkable: invite, role, twenty minutes, three rules, and a one-line entry in a log. The best offboarding is the same in reverse. If you want a tool where every piece of this is a built-in setting rather than a workaround, Yodl is $10 a month for 5 people with a signed BAA; see the pricing page.
Invite to an exact email, give the smallest useful role, teach three rules in twenty minutes, and remove departing staff before they walk out. Keep their messages, log the date.
Frequently asked questions
Should new staff use a personal email to join the team chat?
A work address is better. If you must use a personal address, record which one you invited so you can find and remove the account quickly later. The invite-only model means only that exact address can join.
What should a new hire be able to see on day one?
Only the channels they work in, plus read-only access to announcements. Add channels as the job expands. Too much access on day one is both a privacy problem and a focus problem.
Do I delete a former employee's messages when they leave?
No. Remove their access and keep the history. Messages are part of the practice's operational record, and retention and legal hold settings exist to keep them intact.
What if an employee leaves without notice?
Remove the user the moment you know. Access ends on every device at once, and nothing is stored only on their phone. Then do the rest of the checklist at a calmer pace.
How often should staff repeat the training?
A short refresher once a year, and any time a policy changes. Most practices tie it to the annual HIPAA training they already do.