Guidance
Zoom Phone SMS should never be used to send or receive Protected Health Information (PHI).
SMS is not designed or approved for secure communication of sensitive patient data and does not meet the security standards required by HIPAA. Instead, communications involving PHI must always occur through approved, secure channels, such as those provided by EPIC, which are specifically configured to protect patient confidentiality and maintain compliance.