Email Flows for Telehealth Companies

This guide is part of our playbook on the best ecommerce platform for telehealth companies. The general guide, for any store: triggered email campaigns. Texts are covered in SMS flows for telehealth companies.

The email flows a telehealth brand needs

A telehealth brand needs about ten flows, grouped around the case: before the decision, after it, and around each refill.

Abandoned intakes and checkouts have their own guide: abandoned cart recovery for telehealth companies.

Trigger on care events, not on the calendar

In telehealth, the clock is the case. An email sent on day 30 from signup can land before the clinician decides, or after a cancelled shipment.

This is how a telehealth stack with storefront, doctors, pharmacy and payments like Tagada Rx bills: "Recurring treatments rebill the day the pharmacy ships", not on a calendar date14Tagada docs, How Tagada Rx works, read November 2, 2026. More on the billing side in subscription billing for telehealth companies.

What can go in a telehealth email

Write emails that a roommate could read over the patient's shoulder without learning anything medical.

• Neutral subject lines: "Your order has shipped", "Your next delivery is on March 4".
• Content-free notifications: say a message is waiting, link to the portal, never copy the message.
• No medical claims: emails promise service steps (review, delivery, support), not outcomes.

Does HIPAA apply to your marketing emails?

It depends on who you are. HIPAA covers health plans, clearinghouses and health care providers that transmit health information electronically in a standard transaction, such as an insurance claim345 CFR 160.103, Definitions, "covered entity" and "business associate", current as of October 29, 2026. Many cash-pay brands sit next to a medical practice, and the answer can differ for each entity.

If HIPAA applies, the test is whether the email is "marketing"145 CFR 164.501, Definitions, "marketing", current as of October 29, 2026:

• Vendors: an email tool that "creates, receives, maintains, or transmits" protected health information for a covered entity is a business associate, which means a business associate agreement345 CFR 160.103, Definitions, "covered entity" and "business associate", current as of October 29, 2026.
• Security is not permission. An encrypted email that needs an authorization still needs it.

If HIPAA does not apply, the FTC does. Its Health Breach Notification Rule covers health apps and records "not covered by" HIPAA5FTC, Health Breach Notification Rule, 89 FR 47028, published May 30, 2024, effective July 29, 2024. In the BetterHelp case, the FTC alleged the company used customers' email addresses so Facebook could "identify similar consumers and target them with advertisements"4FTC, FTC to ban BetterHelp from revealing consumers' data, press release, March 2, 2023 (proposed order at the time). Never upload patient lists to ad platforms without a legal review.

Subscription emails the rules require

Treatment plans billed every cycle are subscriptions. Some emails are required, not optional.

Tagada follows Visa and Mastercard rules and the laws that apply to payments.

Regulators look at this. In its July 29, 2026 complaint, the FTC alleges Hims & Hers made cancellation hard "by hiding the cancellation button from consumers"11FTC, FTC and states act against Hims & Hers, press release, July 29, 2026 (allegations, case pending). These are allegations in an open case. Cancellation rules by state are in subscription cancellations for telehealth.

Commercial emails: the CAN-SPAM basics

Promotional emails (win-back, new services) follow CAN-SPAM, whatever HIPAA says6FTC, CAN-SPAM Act: A compliance guide for business, read November 2, 2026:

Each violating email can cost up to $53,088 (FTC, inflation adjustment of January 2024)6FTC, CAN-SPAM Act: A compliance guide for business, read November 2, 2026.

Measure your flows

There is no published email benchmark for telehealth. For scale, Klaviyo reports flows at a 5.58% click rate against 1.69% for campaigns, across 183,000+ customers in all industries12Klaviyo, 2026 Email Marketing Benchmarks by Industry, read November 2, 2026.

Klaviyo itself is not an option for a telehealth brand: its Acceptable Use Policy (April 9, 2026) says you may not use its services for "Prescription medications, pharmaceutical products or services, medical therapies, telehealth"16Klaviyo, Acceptable Use Policy, updated April 9, 2026. Compare your flows with each other, month to month.

Payment failures are covered in failed payment recovery for telehealth companies.

How Tagada helps

Transactional emails from the checkout, on your own domain

The Tagada checkout sends transactional emails on its own events15Tagada docs, Emails, read November 2, 2026, with "24/7 human support on Slack Connect"17TagadaPay, homepage, read November 2, 2026 from TagadaPay:

• Order paid, rebill receipt, upcoming rebill (3 days before the next billing cycle), payment failed, cancellation, abandoned checkout (trigger delay from 10 minutes to 48 hours)15Tagada docs, Emails, read November 2, 2026
• Your own sender domain, set up with SPF, DKIM and DMARC records15Tagada docs, Emails, read November 2, 2026
• Subscriptions with trials, billing cycles, retries and automatic recovery

Building the whole telehealth brand? Tagada Rx runs "Storefront, doctors, pharmacy and payments in one stack"13Tagada, Tagada Rx, read November 2, 2026, and its emails are "content-free": "You have a new message from your care team" and a portal link, never the message text14Tagada docs, How Tagada Rx works, read November 2, 2026. US patients only, by selection.

Start free