Four sessions a month leave the other 26 days between sessions. HHS's behavioral-telehealth privacy guidance, updated in 2025, specifically tells providers to discuss privacy risks and teach clients how to use email, text, or platform chat. A structured check-in can give those days a defined place in therapy when its purpose, limits, and expected response window are agreed before the first message.
Start with a shared expectation
“Message me if you need anything” sounds warm. It also leaves both people guessing. Does the therapist read messages at night? Is a reply an acknowledgment or a clinical exchange? Will the message become part of the record? What happens during vacation?
Those questions are part of the care arrangement. New York telepractice guidance specifically calls attention to time between responses, privacy and confidentiality, formalized sessions, emergency provisions, documentation, and professional boundaries. A messaging policy should turn those concerns into directions a client can understand and a practice can reliably follow.
Give the channel one clear job, such as a scheduled reflection or a brief update about work already discussed. If the content requires assessment, substantial processing, safety planning, or a live exchange, it has exceeded that job.
Build the boundary with eight fields
The following framework is an operational recommendation, not a universal legal checklist. Each field should reflect the therapist's profession, setting, workflow, and applicable requirements.
Field one: Purpose
Describe the channel's job in one sentence. “Use this check-in to note whether you tried the practice we discussed and what you noticed” is easier to follow than “Reach out whenever you need support.” A narrow purpose helps the client decide what belongs there and helps the therapist respond consistently.
State near the purpose that asynchronous check-ins do not replace sessions, assessment, diagnosis, safety planning, or emergency services.
Field two: Consent
Consent needs to cover the actual experience: how to use the channel, its privacy risks, what content fits, when messages are reviewed, what may be documented, what happens during an absence, and where crises are handled instead.
HHS's behavioral-telehealth privacy guidance recommends teaching clients how to use email, text, or platform chat and discussing privacy risks. New York guidance also emphasizes informed consent. A signature can record the agreement, but it does not replace a usable explanation.
Field three: Channel
Choose one approved route so the client knows where to write and the practice knows where to review and document.
Channel choice also requires a privacy discussion. New York warns that cell phones, email, and text may not be secure. HHS says covered providers may communicate by email when reasonable safeguards are applied. For unencrypted email, HHS notes that a provider may need to limit the amount or type of information disclosed and offer more secure alternatives.
Ordinary SMS should not be treated as automatically secure, and marketing should not substitute for a practice's review. HHS telehealth security guidance recommends clear privacy policies, integration into workflow, and education about risks. The AI vendor and BAA question checklist can help evaluate a vendor; it does not decide the channel's clinical boundaries.
Field four: Content limits
Define what a useful check-in looks like. A short structure may ask for the situation, what the client noticed, and the next step connected to therapy. Set limits by subject, length, format, or a combination. Some material needs a formalized session or another appropriate form of care.
Field five: Response window
State when the channel is reviewed and when a client can expect a response. Explain when that window starts and whether the usual response is an acknowledgment, a brief reply within the channel's purpose, or a note that the topic belongs in session.
There is no universal response-time requirement in this framework; rules and professional standards vary. Choose a window the practice can maintain. Describe it as an expectation, not a promise, and do not suggest continuous availability. New York's attention to response timing makes this a decision to disclose clearly.
Field six: Documentation rule
Decide what will enter the record, where it will be recorded, and how the therapist's response will be handled. The goal is to prevent clinically relevant communication from becoming a shadow record distributed across inboxes and devices.
New York guidance flags documentation in telepractice. New Jersey's social-work rules permit asynchronous store-and-forward transmission in telehealth and require the client's originating site in the record. These are state-specific points, not universal requirements, but they show why documentation and location should be resolved before launch. New York also recommends verifying client location and jurisdiction.
Field seven: Out-of-office coverage
Explain what happens during planned absences and outside the normal review schedule. If no one reviews the channel while the therapist is away, say that directly and state when review resumes. If the practice has formally arranged coverage, describe its scope without implying more than the arrangement provides.
An automatic reply can repeat the response window, the absence dates, and the crisis exclusion. It should not suggest that an unattended inbox can detect urgency or route an emergency. The same rule applies on evenings and weekends: the written policy should match the real workflow.
Field eight: Crisis exclusion
State plainly that the channel is not for crises, emergencies, urgent safety needs, or immediate support and is not monitored in real time. Keep that language visible in consent materials, channel instructions, and out-of-office messages.
The practice also needs separate emergency arrangements appropriate to the client and setting. New York telepractice guidance highlights those provisions. An asynchronous message cannot replace them, and the channel should never promise that certain words will activate emergency routing.
Put the policy into the workflow
A one-page agreement is only useful if everyday practice follows it. Before offering check-ins, walk through the complete sequence:
- Agree on the channel's purpose during a session.
- Explain the channel and its privacy risks, then document consent under the practice's rule.
- Give the client a clear prompt or content format.
- Review the response within the stated window.
- Respond only within the agreed scope, moving deeper work to an appropriate session.
- Document the exchange according to the written rule.
- Close the loop at the next session when relevant.
Test the wording from both sides. Could a client tell where to write, what to send, when review occurs, what may be documented, what happens during an absence, and what to do during a crisis? Can the therapist maintain the window and handle a message that exceeds the content limit? Revise vague language or an unrealistic window.
Account for NY, NJ, and CT practice
One policy should not be assumed to satisfy every profession or jurisdiction. Start with the eight fields, then verify the requirements for the therapist, client location, service, and moment of contact.
For New York social workers, the published guidance brings response timing, privacy, formalized sessions, emergency provisions, documentation, boundaries, informed consent, security, location, and jurisdiction into the discussion. New Jersey's social-work rules expressly address asynchronous store-and-forward telehealth and the originating site in the record. Connecticut clinicians should verify current profession-specific and telehealth requirements rather than importing a rule from a neighboring state.
Where VibeCheck.luxury fits
VibeCheck.luxury can be used as a structured channel with explicit boundaries for a defined prompt, a bounded client response, and a planned therapist workflow. It is not live monitoring and should never be described as emergency routing.
The product does not choose the practice's purpose, consent language, limits, response window, documentation rule, absence plan, or crisis exclusion. Define those first, then evaluate whether the structured channel supports them. Practices ready to consider that fit can review VibeCheck.luxury pricing.
FAQ
Can therapists text clients between sessions?
Messaging may be used when it fits the applicable rules and the practice has appropriate safeguards, consent, content limits, documentation, and response expectations. Ordinary SMS is not automatically secure. New York warns that cell phones, email, and text may not be secure, while HHS recommends explaining privacy risks and teaching clients how to use the selected method.
How quickly must a therapist answer a between-session message?
This framework does not impose a universal response time; rules and professional standards vary. State a realistic expected window, explain when the channel is reviewed, and distinguish a brief acknowledgment from clinical discussion. Do not imply immediate availability or live monitoring.
Should between-session messages go in the clinical record?
Use a written documentation rule that identifies which exchanges are recorded, where they are recorded, and how responses are handled. New York guidance flags documentation, and New Jersey's social-work rules require the originating site in the telehealth record. Verify the requirements for the profession, service, and jurisdictions involved.
Can asynchronous check-ins replace sessions or crisis services?
No. A structured check-in can support a narrow, agreed purpose between appointments, but it does not replace sessions, assessment, diagnosis, safety planning, emergency services, or other appropriate care. The channel should expressly exclude crises and state that it is not monitored in real time.