1. Home
  2. Industries
  3. Nonprofit, education & other
  4. Dental practices

Dental recall dialer

A dental-office suitability checklist focused on the missing BAA, patient-data boundaries and why a clinical recall workflow may need another system.

Updated October 21, 2026Nonprofit, education & other

An outreach coordinator on a call at a campus office desk Illustration, not a customer photo.

The short answer

DialBreeze does not currently sign a business associate agreement. Do not put protected health information into the product. A dental office should first have its privacy and security team assess whether any proposed use is appropriate; clinical recall and patient-specific outreach should stay in an approved system.

High-regulation calling. This profession carries sector rules (for example health privacy, collections or political calling law) that a dialer does not satisfy on its own. Talk to counsel and to us before any live campaign.

Suitability comes before a recall list

Dental recall is not merely a sequence of phone numbers. A list’s context can reveal a relationship with a practice, and a conversation may quickly move from scheduling to treatment. DialBreeze does not currently sign a business associate agreement. Do not import protected health information, paste clinical details into notes, or assume that removing a diagnosis makes an export safe.

This is a limitation page, not a recommendation to move recall campaigns into DialBreeze. Ask the practice’s privacy, security and legal reviewers to evaluate the actual data flow before deciding whether there is any appropriate use. If the workflow requires a BAA, use a provider and agreement that satisfy your requirements instead.

Map where information could appear

A review should consider more than the CSV. An administrative intention does not prevent a patient from discussing a condition during a connected call. Do not describe the product as HIPAA compliant on the strength of a generic security feature.

Use fabricated names and reserved fictional numbers for a suitability demonstration. Do not upload a real patient list to test whether it looks harmless. Write down who would access each proposed record, what the call would say, and where any exported information would go. The reviewer—not this guide—decides whether the design is acceptable.

Keep treatment and scheduling systems authoritative

The practice-management system should remain the home for appointments, treatment plans and clinical communication. DialBreeze has no native dental-record connector and does not know whether a patient completed treatment, changed providers or withdrew a communication preference in another system. A manual export does not establish continuous synchronization.

Do not build a workflow that depends on the dialer discovering such changes automatically. Nor should staff use a generic after-call note as an alternative clinical chart. The product’s fixed outcomes are ordinary calling outcomes, not dental treatment-status fields.

A voicemail deserves its own review

Even a short message can expose information to someone who shares a household or phone. Have the practice approve any proposed wording and recipient-verification process before considering its use. This page deliberately supplies no patient recall script and no recommendation to leave a recorded message. Permission for one communication should not be assumed to authorize another.

The same caution applies when someone else answers. Staff need an approved response that avoids discussing the reason for the call with an unverified person. The dialer cannot make that judgment on behalf of the practice.

Decide with an explicit stop condition

Document what would make the proposed use unacceptable: a required agreement that is unavailable, patient information entering a call record, or an inability to keep preferences aligned with the authoritative system. Do not continue a test after one of those conditions is met. Synthetic demonstrations can inform the decision without creating real patient records.

For general healthcare-outreach considerations, use the related healthcare page. For clinical recall, choose an appropriately reviewed system instead of treating this industry page as product approval. Nothing here replaces professional advice about the practice’s obligations.

Calling rules to check first.

  • HIPAA Privacy Rule and business associate agreements
  • 45 CFR 164.502 uses and disclosures
  • 45 CFR 164.504(e) business associate contracts
  • TCPA restrictions on wireless numbers
  • 47 CFR 64.1200 calling hours
  • state all-party recording consent
  • state dental board advertising rules
  • internal suppression list

This is a C fit because a dental recall call is a HIPAA communication before it is a scheduling call. Under 45 CFR 164.502(a) a covered entity may use or disclose protected health information for treatment, payment or health care operations as permitted by 45 CFR 164.506, and a business associate may only use or disclose it under its business associate contract pursuant to 45 CFR 164.504(e). HHS cloud computing guidance treats a vendor that stores or processes protected health information as a business associate, so the agreement comes first. Minimum necessary is in 45 CFR 164.502(b): a voicemail can be heard by anyone, so the approved script should carry no clinical detail. A message that promotes a service the patient has not received, or that involves financial remuneration, can fall under the marketing provisions and require an authorization under 45 CFR 164.508. TCPA restrictions on autodialed and prerecorded calls to wireless numbers apply under 47 CFR 64.1200(a)(1), calling hours run within the legal calling window in the called party's local time under 47 CFR 64.1200(c)(1), and several states require all-party consent before recording. Some states also have dental advertising and fee-splitting rules that affect what may be said in a promotion. DialBreeze places calls and writes notes. It does not sign a business associate agreement, does not classify a communication as treatment or marketing, and does not set your retention period. Complete the privacy review before the first block. This is a description of rules, not compliance advice.

This is operational guidance, not legal advice. DialBreeze enforces the internal DNC list, quiet hours and attempt caps you configure; consent and list eligibility stay with you. How the responsibility splits.

DialBreeze is not a fit if…

Better to know now than in week two of setup.

  • You have not completed a HIPAA review or made a written PHI decision. DialBreeze does not currently sign a BAA, so protected health information must not enter the system.
  • You want to leave treatment detail on voicemail or discuss a patient's care with whoever answers the phone. Minimum necessary applies to both.
  • You want the system to answer clinical questions; route them to the clinical team instead.
  • You want to promote a cosmetic or elective service without checking whether the message is marketing that needs an authorization under 45 CFR 164.508.
  • You need practice management or clinical charting software. DialBreeze is the calling workflow only.

CRM reality, before you switch.

DialBreeze imports and exports CSV and can send signed disposition webhooks. There is no native two-way CRM connector today. Test the exact handoff your team needs during setup before switching.

What connects today

Checklist for the handoff

  • Import a small CSV with your real column layout, using synthetic rows, before a real list.
  • Send one disposition into your actual CRM or automation through the signed webhook.
  • Export the leads to CSV and check the columns your CRM expects.

See the workflow on your own list.

Pick your plan and seats, check out, then set your password from the set-password email. Calling credit is optional at checkout, but you need credit to dial. Add it any time from your dashboard. Start with a small eligible list.

Get startedPricing