Can I just use my personal cell phone for my practice?

For live calls alone the HIPAA risk is low, because a plain phone conversation is transmitted rather than stored. The practical problems are everything else: patients texting a line with no BAA behind it, your caller ID exposing your personal number, and no way to hand the line to staff later. A separate number costs $9 to $24 a month and takes an afternoon to set up.

Is a toll-free 800 number fine for a private practice?

It works, but a local area code is worth some effort. To a patient comparing solo practices, a toll-free number reads like a national call center. If your area code has no available numbers, check whether your metro has a newer overlay area code before settling for toll-free; overlay codes usually have plenty of inventory.

Can I move my number later if I choose wrong?

Yes. US carriers are required to release your number to a new provider when you switch, and clinicians who have ported numbers between these services describe the process as routine. Budget a few business days of overlap and forward the old line until the port completes.

The HIPAA Phone Stack: Spruce vs Phone.com vs Google Voice

A HIPAA-compliant phone number is one whose vendor will sign a business associate agreement (BAA) covering everything the line stores: voicemail audio, transcripts, text threads, and faxes. The free consumer version of Google Voice fails that test, and no setting inside the app changes it; Google's BAA covers Voice only for managed Google Workspace accounts. For a solo practice the realistic field runs about $10 to $49 per user per month, with Workspace-tier Google Voice at the budget end, iPlum and Phone.com in the middle, and Spruce as the medical-specific hub. Every price below was checked against the vendor's own published pricing on August 11, 2026.

This is practice-operations guidance rather than legal advice. Your communication policies (texting consent, email disclosures, voicemail scripts) deserve one pass from your healthcare attorney before launch.

What makes a phone number HIPAA compliant?

The compliance question is about storage, and the answer to storage is a BAA. Talking with a patient over an ordinary phone line has never been a HIPAA problem; a carrier that merely transmits a conversation acts as a conduit and needs no agreement with you. Exposure begins when a service holds patient information at rest, and a modern VoIP number holds plenty: voicemail recordings, machine transcriptions, text messages, fax images. That storage makes the vendor a business associate, so the whole buying decision reduces to two questions. Will this vendor sign a BAA? And does that BAA cover the features you will actually use? Phone lines are one of the surfaces we map in where patient privacy actually leaks; they leak through texts and voicemails far more often than through calls.

How do the options compare on price and features?

Verified against each vendor's published pricing on August 11, 2026:

Service	Price	BAA	What you get
Google Voice, consumer	Free	No	A personal number. Unusable for a practice (details below)
Google Voice, Workspace tier	$10/user/mo (Voice Starter) plus Workspace from $7/user/mo	Yes, managed users only	Calling, voicemail, US texting. Auto-attendant requires the $20 Standard tier. No fax
iPlum	$14.99/user/mo (Professional)	Yes, included at this tier	Second-line mobile app, secure texting. Fax is a separate line from $8.99/mo billed annually
Phone.com	$15 to $33.33/user/mo billed annually; Basic runs $18 month to month	Yes, on request	VoIP with IVR menus on every plan. Texting starts on the Plus tier; fax and HIPAA video sit on upper tiers
Spruce	$24/user/mo (Basic) or $49/user/mo (Communicator)	Yes, all plans	Phone, secure patient texting, video, fax, shared team inbox, auto-replies. Phone trees and after-hours triage on Communicator
Doximity	Free with a verified clinician account	Fax only	Electronic fax plus outbound calls that display your office number as caller ID

Two line items hide below every sticker price. Taxes and regulatory fees are extra everywhere (Spruce began adding them in November 2025). And SMS carrier registration is now an industry-wide requirement for business texting: Spruce charges a one-time $19.50 registration fee, and Phone.com requires registration with carrier fees passed through.

Is Google Voice HIPAA compliant?

Only the paid, employer-managed version. Google's HIPAA Included Functionality list covers "Google Voice (managed users only)," meaning accounts administered through a Google Workspace domain whose admin has accepted the BAA in the console. A free personal Voice number sits outside the BAA no matter how carefully you use it.

The free tier carries a second, harsher problem: Google can suspend a consumer account, and free products have no support line. Clinician forums carry reports of exactly this scenario (one r/therapists thread is titled "Google Voice service suspended"), and the pattern in these user reports is a practice number that stops working without warning, with no human to appeal to, while patients keep dialing it. Treat them as anecdotes; they still describe a practice line depending on a free product with no service guarantee.

The compliant version is a legitimate budget option:

Buy Google Workspace Business Starter, listed at $7 per user per month with an annual commitment (verified August 11, 2026).
Add a Voice Starter license at $10 per user per month, which covers up to 10 users.
Accept the BAA in the Workspace Admin console before the first patient call. This step is what moves you onto the covered list.

That lands around $17 per user per month before taxes. You give up the medical extras: no fax, no missed-call auto-text, and an auto-attendant requires the $20 Voice Standard tier.

What does Spruce actually do for the money?

Spruce sells the jobs around the number rather than the number alone. On the $24 Basic plan, the published feature list includes the BAA, phone, secure in-app patient texting, video, inbound and outbound fax in the same inbox, auto-replies, and AI voicemail transcription, with a shared team inbox and internal comments on patient threads. The $49 Communicator plan adds self-service call flows (the phone tree that routes new patients, current patients, and refill requests differently), urgent escalation and after-hours triage, VoIP phone service, and API access. Billing is month to month with a 14-day trial and no credit card required.

In the private-practice communities we follow, the missed-call auto-text is the feature clinicians credit with replacing a front desk: a missed caller immediately gets a text with a booking link or a request for their email address, and phone tag mostly disappears. Clinicians who moved existing numbers in describe porting as routine. The counterpoints, also from user reports: some prescribers remain uncomfortable texting patients at all regardless of the BAA and run portal-only practices, and at $49 the Communicator tier is the most expensive line on this page.

The voicemail-plus-auto-text combination most solo practices converge on works on any system that supports missed-call auto-text; edit the bracketed parts:

Voicemail greeting:
"You have reached [practice name]. I return every message personally.
Please leave your name, the reason for your call, and the best time
to reach you. For a faster reply, text this number or email
[practice email]. New patients: the fastest route is booking a
consultation at [website]."

Missed-call auto-text:
"Sorry we missed your call at [practice name]. Current patients:
reply here and we will respond within one business day. New patients:
book a consultation at [booking link]. If this is an emergency,
call or text 988, or call 911."

A caller who follows that booking link should land on your screening questions, so the auto-text does intake triage as well as customer service.

Where do Phone.com and iPlum fit?

Phone.com is a general small-business VoIP with a healthcare lane; iPlum is a mobile second-line app with the cheapest BAA on this page. Phone.com's plans run $15 (Basic), $22.50 (Plus), and $33.33 (Pro) per user per month billed annually, with Basic at $18 month to month; every plan includes unlimited minutes and IVR menus, while conversational texting starts on Plus. Its healthcare page advertises HIPAA-compliant voice and video with a standing BAA process, and gates fax and the HIPAA video features by tier, so confirm your exact tier carries what you need before signing. Reliability reports cut both ways in user communities: some clinicians describe years of uneventful service, while others report the mobile app failing to start or hold calls on iPhones and switched providers over it. Read that as a pattern in user reports, and use the trial window to test on your own hardware.

iPlum's Professional plan lists at $14.99 per user per month with the BAA, HIPAA compliance, and secure encrypted texting included at that tier. The $8.99 Standard plan does not include the BAA, a distinction easy to miss when comparing sticker prices. Enterprise at $25.99 adds call recording and ten-year archiving. Fax is a separate line: the standard fax plan runs $8.99 per month billed annually, and the professional fax tier that carries HIPAA compliance and the BAA runs $12.99 billed annually, $15.99 month to month.

Do you still need a fax number?

Yes. Pharmacies, hospitals, and records departments still run on fax, and a psychiatric practice moves more pages than most: prior records requests, discharge summaries, prior authorizations. You have three ways to cover it. Doximity gives verified clinicians send-and-receive electronic fax through its app at no charge, plus an outbound dialer that shows your office number as caller ID instead of your cell. Spruce includes fax on both plans inside the same inbox as calls and texts. iPlum and most standalone fax services sell it as a separate line, and the entry tiers commonly cap monthly page counts; a single records request can run 50 or more pages, so if you expect records-heavy intakes, price the unlimited tier from the start. Fax is one line on the longer launch equipment list; the free Doximity option means it should never delay your opening.

What should your texting and email policy say?

Decide your channels before the first patient has your number, and write them into your intake paperwork. Three lanes, in descending order of protection:

Portal or BAA-covered app messaging is the conservative default. Everything is inside a covered system; there is nothing to disclose.
Plain SMS and email are workable with a documented patient preference and a written disclosure that these channels are unsecured. Keep clinical content out of them; use them for logistics and move anything substantive into the covered channel. Have your attorney bless the exact consent language.
Voicemail deserves a policy too: say in your greeting what callers should leave, and assume anything recorded is stored PHI on your vendor's servers.

Patients follow the channel you train them into. A tactic that recurs across the practices we watch: answer voicemails with a portal message or email instead of a callback, and within a few cycles voicemail volume drops to nearly nothing. Most VoIP systems can also route inbound texts to your email with push notifications off, so after-hours messages wait in your inbox instead of buzzing your phone at dinner. Every vendor that touches these messages belongs on your BAA checklist, and if a human answering service or assistant picks up your line, that arrangement needs its own agreements.

How do you actually choose?

Match the stack to the jobs you need covered rather than to a best-overall ranking. If the job is a defensible professional number at minimum cost, the two cheapest BAA-covered routes are iPlum Professional at $14.99 and Workspace-tier Google Voice at about $17 all-in. If the job is calls, secure texting, and fax in one inbox with auto-replies doing front-desk work, that combination is what Spruce packages, at $24 without the phone tree and $49 with it. If the job is conventional VoIP with tiered growth, Phone.com prices between the two. If the job is only fax, Doximity costs nothing.

Two budget lines you can probably skip. Live answering services quote roughly $50 to $300 per month, and the recurring user report is that per-minute billing spirals once established patients learn a warm voice always picks up; a missed-call auto-text with a booking link covers the new-patient job for a fraction of the price, and a 48-hour response window for new inquiries is a common and workable standard. Also expect junk traffic: once your NPI appears in the NPPES registry, several spam calls a day is a widely reported baseline, which is one more reason solo practices increasingly let everything roll to voicemail and push contact through web forms and the portal.

Sina Hartung, who ran the day-to-day operations of a working practice before Eureka had outside customers, puts the timing rule this way: "Whatever you pick, buy it before you see your first patient. Porting a number between these services is routine. Untraining patients who have spent six months texting your personal cell is the expensive part."