WhatsApp appointment scheduling
Your patients already message you to ask for appointments; what decides the outcome is whether your IPS answers with the real schedule, at any hour, without exposing their data.
More and more patients ask for appointments on WhatsApp before they call. They write at any hour and expect an answer within minutes. For your IPS (instituciones prestadoras de salud, Colombia's healthcare provider institutions), this takes pressure off the phone line, but that chat carries health data, which Ley 1581 de 2012 (Law 1581 of 2012) classifies as sensitive data, and it books appointments that must be recorded with the dates required by Resolución 1552 de 2013 (Resolution 1552 of 2013).
This guide explains the full flow, Meta's rules, the controls an IPS needs and what to check when choosing a tool. To make sure patients actually show up, pair it with the guide to reducing patient no-shows.
In short
- App or platform: the WhatsApp Business app is designed for small businesses; connecting the chat to your schedule requires the platform (Cloud API).
- Meta's rules: outside the 24-hour window you can only send approved templates, and Meta charges per delivered template.
- Identity first: verify the person before showing, changing or canceling an appointment.
- Photographed orders: automatic reading saves data entry, but a person reviews anything unclear.
- A way to reach a person: the patient can always ask for a person, and an emergency is referred to the 123 emergency line.
- Connected schedule: without integration with the clinical software, the chat only takes messages.
How WhatsApp appointment scheduling works at an IPS
WhatsApp Business app or platform
Meta offers two products. The WhatsApp Business app "was designed with small businesses in mind" and is installed on a phone. The WhatsApp Business Platform, through the Cloud API, lets you send and receive messages programmatically. With the platform, the chat connects to the schedule and conversations are split among several agents. With a shared cell phone, every appointment depends on someone copying it by hand.
The Meta rules that affect your scheduling center
- Customer service window. When the patient writes, a 24-hour window opens, and it restarts with every message they send. Inside it you reply with free-form text; once it closes, you can only send approved templates (Meta, sending messages).
- Message templates. Each template is categorized as marketing, utility or authentication and can only be sent once approved; review can take up to 24 hours (Meta, templates). If it mixes a reminder with a promotion, it is considered marketing (Meta, categories).
- Opt-in. You can only message people who agreed to receive your messages, and the opt-in must state clearly that the person agrees to receive communications from your IPS, naming it (Meta, opt-in).
- Pricing. Since July 1, 2025, Meta charges per message: only for delivered templates, based on their category and the recipient's country code. Non-template messages are free inside the window, and so are utility templates delivered while the window is open (Meta, pricing).
How a request flows
- The patient writes. The first reply includes the data processing notice: Law 1581 requires you to state the purpose, the data subject's rights and who the data controller is (article 12).
- Verification. The assistant asks for the ID number and checks it with a second factor: something only the patient knows, such as their date of birth, or a one-time code sent to the registered phone number or email. Checking open slots does not expose any data; viewing, changing or canceling an appointment does.
- What they need. Service, specialty, site, EPS (the health insurers that manage Colombia's mandatory health plans) and whether the appointment requires a medical order. If the order arrives as a photo, the system reads it and a person reviews the unclear cases.
- Slots. A few clear options. Meta allows up to three reply buttons per interactive message (Meta, buttons).
- Booking. The appointment is written into the clinical software with the request date, desired date, assigned date and site with its REPS code (Registro Especial de Prestadores de Servicios de Salud, Colombia's registry of health service providers), the data required by article 2 of Resolution 1552.
- Afterward. The patient receives the site, time and instructions, and before the appointment, a reminder to confirm, reschedule or cancel.
- A person, when needed. At any step the patient can ask to talk to someone, who sees what has already been discussed.
What a WhatsApp scheduling solution should have
Use this list to evaluate any tool, including ours; if one fails on several points, it is probably not suitable for an IPS.
- A number in your IPS's name on the WhatsApp Business Platform, with a connection process your team can reverse.
- Reading from and writing to the clinical schedule, not a form someone transcribes. Ask how: native integration, the HL7 FHIR R4 standard (Slot and Appointment resources) or your vendor's API.
- Verification per action, because checking slots, booking and canceling do not carry the same risk.
- Resolution 1552 dates that cannot be edited afterward, with the site's REPS code.
- Templates with their review status and category, and the 24-hour window visible to the agent.
- A record of the opt-in, the opt-outs and the privacy notice that was sent, in case a patient files a complaint.
- Order reading with a confidence threshold and human review with the image next to the data.
- Handoff to a person with the history, so the patient does not have to repeat their case.
- Explicit rules: the assistant introduces itself as virtual, gives no clinical advice and refers emergencies to 123.
- Costs broken out into license, usage and Meta charges.
How Omcall handles it
Omcall is Omneri's contact center for Colombian IPS: WhatsApp shares an inbox with voice, web chat and email (see the platform); the full context is in the guide to the call center for IPS. On WhatsApp, it does the following:
- Channel. It uses the Cloud API and connects the number through Meta's Embedded Signup. Templates are created, submitted for review and have their status synced from the console; each conversation shows how much of the 24-hour window is left, and the words BAJA or STOP record the opt-out.
- Privacy notice. In the first reply of a conversation the patient starts, it sends the data processing notice your IPS has active, once. The default text is a draft your legal advisor must review.
- AI agents. The Receptionist and the Scheduler introduce themselves as virtual assistants, always offer a person, give no clinical advice and, in an emergency, point to 123 and hand off. Searching for slots does not require verification; viewing, booking, rescheduling or canceling requires a one-time code, and canceling can require a person's approval. More in AI agents for call centers.
- Medical orders. Photos and PDFs that look like orders are read with AI vision (CUPS procedure codes, ICD-10, physician, date and EPS). If a field is missing or confidence falls below the threshold, the order goes to review with the image next to the form. Omcall does not connect to EPS portals today: your team files the request there and records the response in the case. Every file goes through an antivirus scan.
- Schedule. It comes with connectors for Omneri and for software that exposes FHIR R4; any other system needs a connector to its API. The request, desired and first assigned dates cannot be modified, and timeliness (oportunidad, the wait between the request and the assigned date) is calculated in business days, accounting for holidays.
- People. Supervisors can take over a conversation from the AI, and whoever receives it sees the case record.
The 72-hour and 24-hour reminders and the waitlist are covered in the guide to reducing no-shows. One decision remains to review with your legal advisor: whether canceling from a reminder button, from the registered number, should also require a code. To see it with your schedule, book a demo.
Applicable regulations
- Law 1581 of 2012. Health data is sensitive (article 5), processing it requires prior, informed authorization (article 9) and the data controller must prevent unauthorized access (article 17, item d). How Omcall handles data is described in its privacy policy.
- Resolution 1552 of 2013. EPS, directly or through their provider network, must record the request, desired and assigned dates and the IPS with its REPS code, and must have remote mechanisms to receive requests and assign appointments (article 2). General medicine and general dentistry appointments are assigned within three business days at most, unless the patient asks for a different time frame. More in the guide to Resolution 1552.
- Ley 2300 de 2023 (Law 2300 of 2023). It regulates the hours and frequency of certain contacts with consumers, such as debt collection. Whether appointment reminders fall within its scope is a question your IPS must resolve with its legal advisor.
- Meta's policies. They are not law, but they apply to every number on the platform.
The legal parameters that come with Omcall are configurable drafts; this guide does not replace legal review.
Frequently asked questions
Yes, as long as the assistant is connected to the real schedule and follows clear rules. An AI agent can identify the patient, verify them, search for slots and write the appointment into the clinical software without human intervention. What it should not do is give clinical advice or hold on to someone who asks for a person, and in an emergency it must point to the 123 line. Resolution 1552 of 2013 requires remote mechanisms to receive requests and assign appointments, and a well-controlled automated channel can be one of them.
You can, but it falls short for a scheduling center. Meta states that the WhatsApp Business app was designed with small businesses in mind. To connect the chat to the schedule, split conversations among several agents, use approved templates at scale and measure response times, you use the WhatsApp Business Platform through the Cloud API, which lets you send messages programmatically. A small IPS with a single site can start with the app, knowing it will have to record the dates required by Resolution 1552 by hand.
Meta charges per delivered template, not per conversation. Since July 1, 2025, the rate depends on the template category (marketing, utility or authentication) and the country code of the receiving number. Non-template replies are free while the 24-hour customer service window is open, and so are utility templates delivered inside that window. A reminder sent days before the appointment, after the window has closed, does have a cost. Current rates are listed in Meta's pricing documentation.
Yes, with an approved template and only to patients who have agreed to receive messages from your IPS. Outside the 24-hour window the patient opens by writing, Meta only allows approved templates, and its policy requires the opt-in to state clearly that the person agrees to receive communications from your IPS and what its name is. It is a good idea to record that consent when the appointment is booked, whether at the site, by phone or on the web. If the reminder includes a promotion, Meta considers it marketing.
With a second factor before showing or changing any appointment. The usual approach is to combine the ID number with something only the patient knows, such as their date of birth, or to send a one-time code to the registered phone number or email. The number they write from may belong to a relative, and Law 1581 requires the data controller to keep data with the security needed to prevent unauthorized access. Checking open slots, on the other hand, does not expose patient data and can be done without verification.
Yes, if a person reviews whatever the automatic reading is unsure about. From a photo you can extract the service with its CUPS code, the diagnosis, the physician, the date and the EPS, but lighting, handwriting or a stamp can confuse the reader. The sensible approach is for orders with low confidence or missing data to go to a person who sees the image next to the form. Since the order contains health data, which Law 1581 treats as sensitive, it must be stored encrypted and with audited access.
Omcall is billed as a license per agent per month plus AI and channel usage, such as voice minutes and messages. The price depends on how many people handle contacts, how many sites and channels you connect and which AI agents you turn on, so it is sized in the demo with your real operation, and that produces a specific figure, not a range. Meta's charges per delivered template are added at its rate for Colombia. IPS that join as design partners get a 30-day pilot at no cost. You can book the demo.
