Instagram DM automation for clinics sends a fixed reply with a link when someone comments a keyword like BOOK, replies to a Story, or messages a word like PRICE. The reply answers front desk questions: prices, insurance, opening hours, booking and intake forms. It never diagnoses and never asks about symptoms. Health details stay in your booking system and intake form, not in Instagram.
Picture a physiotherapy clinic that posts a Reel about a new sports injury service. By Monday morning there are 40 comments asking “how much is an assessment?” and “do you take my insurance?”, plus a few people describing their knee pain in public. Reception answers the phones first. The comments wait.
This guide is for private clinics: physiotherapy, chiropractic, IV and wellness clinics, and private GP-style practices in the US, UK and EU. It covers the five replies worth automating, the keywords that keep comments neutral, what HIPAA and UK and EU data protection law mean for a DM, and the emergency line every reply should carry. Therapists and mental health practices have their own guide: Instagram DM automation for therapists.
Key Takeaways
- Automate the front desk, never the clinic. A DM can send prices, hours, insurer lists, booking links and intake form links. Clinical questions go to a clinician by phone or in person.
- Use keywords that name no condition. Comments are public. Ask people to comment BOOK or PRICE, never SCIATICA or BACKPAIN.
- Keep health details off Instagram. In the US, HIPAA protects health information that can identify a patient, and a vendor that handles it for you needs a Business Associate Agreement. In the UK and EU, health data is special category data with extra conditions.
- Every reply carries an emergency line. 911 in the US, 999 in the UK (or NHS 111 for urgent but not life-threatening problems), 112 across the EU.
- Put everything in the first message. Meta allows one private reply per comment, within 7 days. A second message can go only after the person replies.
- Start small. CreatorFlow Free covers comment, Story reply and keyword DMs with 500 DMs a month. Pro is $15 a month for 5,000 DMs per workspace and link click tracking.
What Instagram DM automation for clinics can answer
Instagram DM automation for clinics answers the questions reception hears every day, with the same reply every time. The person comments or messages a keyword. The DM arrives in seconds with one answer and one link. Booking, payment and anything about the patient’s health happen on the clinic’s own systems after they press the link.
These are the five jobs that fit most private clinics:
| Patient question | Keyword | Trigger | What the DM sends | Where it continues |
|---|---|---|---|---|
| ”Can I book?” | BOOK | Reel or post comment | Booking link and first-visit times | Your booking system |
| ”How much is an assessment?” | PRICE | Comment or DM | Price list link and what a first visit includes | Your price page |
| ”Do you take my insurance?” | INSURANCE | DM | Insurer list and payment options, plus “please do not send your policy number here” | Your insurance page or phone |
| ”What do I fill in before I come?” | FORMS | DM or Story reply | Link to your intake form | Your intake form tool |
| ”Are you open now?” | HOURS | Story reply or DM | Opening hours, address, and the emergency line | Phone or your website |
Each job is one automation with one keyword. A clinic with a sports service and a women’s health service can run BOOK on both Reels and send each one to its own booking page. That keeps every reply short.
For how the booking button itself works inside the DM, see our guide to Instagram booking links.
Pick keywords that name no condition
A comment on Instagram is public, so the keyword you ask for decides what people say about themselves in front of everyone. Ask for BOOK, PRICE, HOURS or FORMS. Never ask people to comment a condition, a body part or a treatment for a condition, such as KNEE, SCIATICA or ANXIETY.
This matters more than it looks. The UK General Medical Council’s social media guidance for doctors warns that small pieces of information can add up until a patient’s case can be recognised. A public thread where 30 people comment SCIATICA under your clinic’s post builds exactly that kind of record.
Some people will describe their symptoms in the comments anyway. Do not answer the symptom in public. Reply once with a neutral line (“Thanks, we have sent you a DM with how to book”), and let the clinician talk about the problem at the appointment.
Good keywords: BOOK, PRICE, INSURANCE, FORMS, HOURS, NEW PATIENT, SATURDAY.
Keywords to avoid: any condition (MIGRAINE, SCIATICA), any body part (KNEE, SHOULDER), any test result, and any word that implies a diagnosis.
CreatorFlow matches keywords as whole words and ignores capital letters, and one automation can hold up to 20 keywords. So “book” and “BOOK please” both trigger BOOK. For the details of trigger words, read the keyword trigger setup guide.
HIPAA and Instagram DMs for US clinics
HIPAA protects health information that relates to a person’s physical or mental health, care or payment, and that identifies them or could reasonably be used to identify them. That is the definition of protected health information in 45 CFR 160.103, and the HHS summary of the Privacy Rule adds that demographic data counts when it is linked to health.
A vendor that creates, receives, keeps or sends protected health information for a covered practice is a business associate. HHS says the practice needs written assurances from that vendor, usually a Business Associate Agreement, before it shares the information (HHS business associate guidance). We could not find any offer from Meta to sign a Business Associate Agreement for Instagram messaging (checked November 2026). So plan your DMs as if Instagram is outside your HIPAA setup.
In practice that gives you one simple test for every automated message: could this reply, read next to the person’s Instagram name, say something about their health? If yes, it does not belong in a DM.
| Safe in an automated DM | Keep off Instagram |
|---|---|
| Booking link and opening hours | Diagnoses, symptoms or test results |
| Price list and what a first visit includes | Treatment plans or progress notes |
| Insurer list and payment options | Policy numbers, member IDs, billing details |
| Link to your intake form on your own system | The intake answers themselves |
| Address, parking, what to bring | Appointment confirmations that name a treatment |
Public replies carry the same risk. HHS has settled with practices that shared patient details while answering online reviews, including a $30,000 agreement with Manasa Health Center in 2023 and a $10,000 agreement with Elite Dental Associates in 2019. The lesson for Instagram comments is the same: never confirm in public that someone is your patient.
Health data under UK and EU GDPR
In the UK, the Information Commissioner’s Office defines health data as personal data about a person’s physical or mental health, and lists it as special category data (ICO: what is special category data). To use it, a clinic needs a lawful basis under Article 6 and a separate condition under Article 9, chosen before the processing starts (ICO special category data guide).
In the EU, Article 9 of the GDPR starts from a ban on processing health data, then lists the exceptions, such as explicit consent and health care.
For an Instagram auto-reply this points the same way as HIPAA. Do not use the DM to collect health details. Send a link to your intake form, where your privacy notice, your lawful basis and your Article 9 condition already sit. If you want to do more than that inside Instagram, ask your data protection officer first.
UK clinicians also answer to their regulator. The HCPC guidance on social media, which covers registered physiotherapists, says you must not post information that could identify a service user without their permission. The GMC guidance says the same for doctors.
Never diagnose or triage by DM
An automated reply cannot see the person, ask follow-up questions or judge how urgent a problem is. So it should not try. The DM sends people to a booking page or a phone number, and a clinician takes it from there.
The GMC’s advice on social media gives doctors a simple rule when a patient asks about their care online: point them to an appointment, or to emergency services if they need urgent care. Build that rule into every message.
Put an emergency line in every reply. Write it once and paste it into each automation:
- US: “If this is an emergency, call 911.”
- UK: “If this is an emergency, call 999. For urgent problems that are not life-threatening, use NHS 111.” The NHS 111 page tells people with signs of a life-threatening illness to call 999 now.
- EU: “If this is an emergency, call 112.” The European Commission says 112 works free of charge in every EU country.
IV and wellness clinics have one more rule. In the UK, the Advertising Standards Authority’s guidance on IV nutritional therapy warns that benefit claims like “immunity”, “energy” or “fast recovery” are likely to break the advertising rules without strong evidence. A DM that sells a drip is marketing too. Describe the menu and the price, and leave the health claims out.
Five reply templates for private clinics
Each template fits in one message, because Meta allows one private reply per comment (see the next section). Replace the brackets with your own details.
1. Booking (comment BOOK)
Hi, thanks for asking about [service name] at [clinic name].
You can pick a time here: [booking link]
First visits are [length] and include [what happens]. If this is an emergency, call [911 / 999 / 112].
2. Price of an assessment (comment or DM PRICE)
Here is our price list for new patients: [price page link]
An initial assessment is [price] and lasts [length]. Follow-up sessions are [price].
Book a time here: [booking link]
Prices on a public price list are not health information, so they are fine in a DM. Keep any quote that depends on the person’s condition for the appointment.
3. Insurance (DM INSURANCE)
We work with these insurers and payment options: [insurance page link]
Please do not send your policy number or medical details here. Our team can check your cover by phone on [number] or at your first visit.
4. Intake forms (DM or Story reply FORMS)
Here is our new patient form: [intake form link]
Please fill it in before your first visit. It is private, and only our clinical team sees it.
Questions about the form? Call us on [number].
Only write “private” if your form tool and your data setup support that statement. Ask whoever manages your forms.
5. Hours and after-hours reply (Story reply or DM HOURS)
We are open [days and hours] at [address].
Book online any time: [booking link]
If this is an emergency, call [911 / 999 / 112]. [UK: For urgent problems that are not life-threatening, use NHS 111.]
The physiotherapy and chiropractic versions are the same templates with different service names. A private GP-style practice usually adds a line about which services need a referral. An IV clinic adds its menu link and drops any benefit claims.
After-hours replies that still help
Someone who sees your Reel at 11 pm on a Saturday finds nobody at the desk. An automated reply gives them the booking link at once, and the slot is in your system by Monday. The same setup means you never miss a comment on a busy post.
Two setups work well:
- Story reply: Post a Story on Friday (“Reply HOURS for our weekend times”) and let Story reply automation send the hours and the booking link to everyone who replies.
- Keyword DM: Pin a line in your bio (“DM BOOK for appointments”) so a message at any hour gets the link.
Keep the emergency line in both. An after-hours reply is the message most likely to reach someone who should be calling an emergency number instead.
Meta’s rules that shape every clinic reply
Meta’s own rules decide how much one reply can do. For a comment, Meta’s private replies documentation says the reply must go within 7 days of the comment, and only one message can be sent. Follow-up messages can go only if the person responds, and within 24 hours of that response (checked November 2026).
For direct messages, Meta’s Instagram messaging documentation gives a 24-hour window after most user actions. A Human Agent tag extends that to 7 days for a person on your team who needs more time (checked November 2026).
What this means for a clinic:
- Put the answer, the link and the emergency line in the first message. There is no second message unless the patient writes back.
- Do not plan “reminder” DMs. Appointment reminders belong in your booking system, by email or text.
- When a patient replies with a real question, a person on your team answers it, inside the window, and moves anything clinical to phone or the appointment.
Set it up in CreatorFlow
CreatorFlow is a Meta Tech Provider and connects through Meta’s official Instagram API, so you never share your clinic’s password. Setup takes under 2 minutes.
- Switch to a professional account. Your clinic’s Instagram must be a Business or Creator account. A personal account switches for free in Instagram settings.
- Connect Instagram. Sign in to CreatorFlow and confirm the connection on Instagram.
- Create one automation per job. Choose the trigger (comment on a Reel or post, Story reply, or a keyword in DMs), add the keyword, and paste the reply from the templates above.
- Add the emergency line to every reply before you turn it on.
- Test from a second account. Comment BOOK from a staff member’s personal account, not from the clinic account, and check that every link opens.
- Tell people in the caption. “Comment BOOK for appointment times” is enough. CreatorFlow then sends the link to everyone who comments BOOK.
Pick the plan by the number of Instagram accounts and the DM volume:
| Your clinic | Plan | What you get |
|---|---|---|
| One clinic testing automation | Free, $0 | 500 DMs a month, 1 workspace, unlimited automations |
| One busy clinic | Pro, $15 a month | 5,000 DMs a month per workspace, 2 workspaces, link click tracking, clicks by country and city |
| A group with several sites | Growth, $30 a month | 10,000 DMs a month per workspace, 5 workspaces, priority support |
Pro’s link click tracking shows which Reel sent the most people to your booking page. Clicks by city show whether those people live near enough to come in. New accounts start with a 14-day Pro trial, which asks for a card to verify the account and charges nothing until the trial ends. Full plan details are on the CreatorFlow page for private clinics, and the wider healthcare and wellness page shows other practice types.
Common mistakes clinics make with DM automation
Asking a screening question in the DM. “What symptoms do you have?” invites health details into Instagram. Send the intake form link instead.
A keyword that names a condition. COMMENT SCIATICA puts a health detail next to dozens of public names. Use BOOK.
A reply with no emergency line. Your auto-reply goes out at any hour, to anyone. Add the line once to every automation.
Health claims in a sales DM. For IV and wellness clinics, a line like “supports your immune system” in a DM is advertising. Describe the service and the price.
Treating the DM as a confirmation. “See you Tuesday for your knee rehab” names a treatment. Let your booking system send confirmations through its own channels.
FAQ
Is Instagram DM automation HIPAA compliant?
The question is what you send, more than the tool you use. We found no offer from Meta to sign a Business Associate Agreement for Instagram messaging (checked November 2026), so plan as if Instagram is outside your HIPAA setup. Keep automated DMs to booking links, prices, hours and form links, and keep protected health information on your own systems.
What should a clinic never send in an Instagram DM?
Never send diagnoses, symptoms, test results, treatment plans, policy numbers or appointment confirmations that name a treatment. Do not ask screening questions either. Send a link to your intake form or booking system, and let the clinician handle the clinical part.
Can a clinic reply to Instagram comments automatically?
Yes. With comment-to-DM automation, everyone who comments a keyword like BOOK gets a private reply with your booking link in seconds. Meta allows one private reply per comment, sent within 7 days, so put the full answer and link in that first message.
How should a clinic handle emergencies on Instagram?
Add an emergency line to every automated reply: 911 in the US, 999 in the UK (NHS 111 for urgent problems that are not life-threatening), and 112 in the EU. Do not try to judge urgency by DM. An automated reply cannot assess a patient.
Does UK GDPR allow health questions in Instagram DMs?
Health data is special category data under UK GDPR, so a clinic needs a lawful basis and a separate Article 9 condition before it uses it. The simplest route is to collect nothing health-related in Instagram and send people to your intake form. Check anything beyond that with your data protection officer.
Which keywords work best for physiotherapy and chiropractic clinics?
Neutral words that describe the action, not the problem: BOOK, PRICE, INSURANCE, FORMS, HOURS and NEW PATIENT. Avoid body parts and conditions such as KNEE or SCIATICA, because the comment is public.
How much does Instagram DM automation cost for a clinic?
CreatorFlow Free is $0 with 500 DMs a month. Pro is $15 a month (or $144 a year) with 5,000 DMs per workspace and link click tracking. Growth is $30 a month for clinic groups that need up to 5 Instagram accounts.
Disclaimer: This article is general information, not legal advice. HIPAA, UK GDPR, the EU GDPR and professional rules apply differently to each practice. Check your setup with your compliance lead, data protection officer or regulator before you go live.
Sources and checks
Sources checked November 2026: Meta’s private replies documentation and Instagram messaging documentation; 45 CFR 160.103; HHS Privacy Rule summary, business associate guidance, and the Manasa Health Center and Elite Dental Associates agreements; the ICO on special category data; GDPR Article 9; the GMC’s social media guidance and advice page; the HCPC social media guidance; NHS 111; the European Commission on 112; the ASA on IV nutritional therapy. CreatorFlow plans and features from creatorflow.so.
