WhatsApp for Clinics in Saudi Arabia: Reminders That Work, and Health Data That Stays Out of the Chat

Short answer: a Saudi clinic should use WhatsApp for booking, confirmation, reminders, rescheduling and "your results are ready" notices — all utility messages at SAR 0.0401 each — and keep diagnoses, results and medication details out of the chat, sending patients to a secure portal instead. The PDPL's Implementing Regulations require explicit consent for sensitive data and add specific controls for health data, and WhatsApp's own policy bars sending health information where local rules require systems with heightened safeguards. Recall and offer messages are marketing at SAR 0.2159, and the Ministry of Health restricts how practitioners and facilities advertise. A three-branch Riyadh dental and dermatology group pays Meta about SAR 957–1,038 a month. QuickWA runs appointment booking in Arabic and English from $5/month, with 0% markup on Meta's fees.

What Saudi patients already expect

Most Saudi residents have used the Ministry of Health's Sehhaty app. MOH's own service page describes booking primary-care appointments in it — choosing a clinic, the nearest centre and a time slot, with the option to modify or cancel — free of charge for anyone with an Absher account, alongside the unified 937 line. MOH announced in 2022 that the app sends appointment reminders by text message.

That sets the baseline for a private clinic in Riyadh, Jeddah or Al Khobar. A patient who books a cleaning at a dental centre, a laser session at an aesthetics clinic or a blood test at a lab expects the same: a confirmation, a reminder, and an easy way to move the slot. WhatsApp is where they will do it, because it is where they already message the clinic's reception.

The difference between a clinic that does this well and one that creates risk is not the software. It is what goes into the messages.

The patient journey on WhatsApp

Meta's categorisation rules list feedback surveys tied to a specific order or engagement under utility, and say any template that mixes an update with promotion is marketing. A reminder that adds "book teeth whitening at 20% off" stops being a reminder in Meta's eyes.

Cutting no-shows: what actually works

Confirm, then remind

Send the confirmation immediately and the reminder 24 hours before, with two quick-reply buttons. A patient who taps "Reschedule" opens the 24-hour customer-service window, so the back-and-forth to find a new slot is service messaging — the first 1,000 replies per number each month are free. Release the slot the moment they reschedule so reception can offer it to the waiting list.

Respect the Saudi week and the day

Clinic demand clusters after work and after Maghrib, and the weekend is Friday and Saturday. A reminder for a Sunday morning appointment that arrives on Saturday at 11 PM is ignored; one that arrives Saturday afternoon is answered. Set QuickWA's sending window in Settings so scheduled reminders wait for it to reopen. During Ramadan, when many clinics shift to evening hours, send a one-off note to patients with upcoming bookings about the new timings — and see our Saudi campaign calendar for the 2027 dates.

Make the second reminder conditional

For long or expensive appointments — an implant consultation, a laser package, a fasting blood panel — add a second reminder two hours before, but only to patients who did not confirm. That keeps the message count, and the bill, proportional to the risk.

The general pattern is in our appointment reminders guide; the rest of this article is about what is specific to the Kingdom.

Health data: what not to send

Three layers apply to a Saudi clinic's WhatsApp.

The PDPL

The Personal Data Protection Law, enforced by SDAIA since September 2024, applies to any processing of personal data in the Kingdom. Clyde & Co's summary of the Implementing Regulations notes that explicit consent is required where processing involves sensitive data, that DPIAs are required for sensitive-data processing, that additional controls apply to health data, and that controllers must also follow the rules of sector regulators such as the Ministry of Health. Latham & Watkins notes fines of up to SAR 5 million (doubled for repeat violations) and possible imprisonment for certain unlawful disclosures of sensitive data. Breaches must be notified to SDAIA within 72 hours.

WhatsApp's own policy

WhatsApp's Business Messaging Policy says: don't use WhatsApp for telemedicine or to send or request health-related information if applicable regulations prohibit distribution of such information to systems that do not meet heightened requirements for handling it. It also says not to share or ask for personal ID card numbers or other sensitive identifiers — which, in Saudi Arabia, includes national ID and Iqama numbers.

What that means in practice

• Never send results, diagnoses, prescriptions or images in the chat. Send "your results are ready" and a link to your patient portal or app, behind its own login.
• Keep the department vague where it reveals a condition. "Your appointment at our clinic" is safer than naming an IVF, psychiatry or oncology department in a preview that appears on a lock screen.
• Don't collect ID numbers or insurance card numbers by chat. Point patients to your registration form or ask them to bring the card.
• Write a short reception script for when a patient volunteers symptoms or sends a photo of a rash: thank them, don't diagnose, offer a consultation slot, and move clinical discussion to the consultation.
• Record consent for WhatsApp communication at registration, separately from consent to marketing. QuickWA's consent tracking stores who agreed and when, and STOP replies become opt-outs automatically.

This is not legal advice, and a hospital group should have its DPO review its WhatsApp use. But the principle — WhatsApp for logistics, the portal for clinical content — keeps most clinics on the right side of all three layers.

Promotion: MOH's rules on health advertising

The Ministry of Health has repeatedly reminded practitioners that Article 10 of the Law of Practising Health Professions prohibits them from advertising or promoting themselves, directly or through intermediaries, except in cases the executive regulations allow. In April 2024 MOH announced a four-month suspension and advertising violations against a practitioner who repeatedly published commercial advertisements without scientific basis, and said it monitors what is published on social platforms. A February 2025 report of an MOH statement adds that the Private Health Institutions System prohibits advertising health institutions except in accordance with the executive regulations and professional ethics.

For WhatsApp marketing, that means:

• Promote the facility's services within its licence, not an individual doctor's personal brand.
• No unsupported claims. "100% results", "painless" or "the best dermatologist in Riyadh" are the kind of statements that attract attention from MOH.
• Be careful with before-and-after photos and patient stories. Ask your licensing adviser before sending them; patient images also raise consent and privacy questions under the PDPL.
• Send offers only to patients who opted in to marketing, with an opt-out in every message. Our Saudi marketing rules guide has consent wording.

Pharmacies have a further constraint: WhatsApp's Commerce Policy prohibits selling drugs — prescription or otherwise — and medical and healthcare products through WhatsApp commerce features, so a pharmacy can use WhatsApp for refill reminders and opening hours, not for a medicine catalog.

Arabic and English, done properly

Saudi clinics serve Saudi families who expect Arabic and a large expatriate workforce that often prefers English. Store each patient's preferred language at registration — never guess it from a name — and create every template in both languages under one template name, so the right version goes automatically.

مرحبًا {{1}}، نذكّرك بموعدك في {{2}} يوم {{3}} الساعة {{4}}. نرجو الحضور قبل الموعد بـ 15 دقيقة. للتأكيد أو تغيير الموعد اختر من الأزرار أدناه.

Hello {{1}}, a reminder of your appointment at {{2}} on {{3}} at {{4}}. Please arrive 15 minutes early. Use the buttons below to confirm or change it.

Use a respectful register in Arabic — "نذكّرك" and "نرجو" read as professional — and keep dates in a format patients recognise; many Saudi patients are comfortable with Gregorian dates for appointments, but a clinic serving older patients may add the Hijri date. QuickWA's AI agent assist and knowledge-base bot reply in the patient's language, Arabic or English, for routine questions such as opening hours, parking or whether a branch accepts a particular insurer. More examples are in our Arabic template library.

A month for a three-branch Riyadh clinic group, worked out

An illustrative dental and dermatology group with three branches in Riyadh and 4,200 appointments a month, at Meta's Saudi SAR rates from 1 October 2026.

Meta's free tier is 1,000 service messages per business phone number per month, so a group whose branches each have their own number gets three free tiers. Here that saves SAR 80.20 a month. Whether to run one number or several is mostly an operational choice — patients like a branch-specific number, while a single number is simpler to advertise — but the free tier is a small point in favour of one per branch.

Where the risk is

The recall campaign is a third of the bill and needs marketing consent. The single costliest mistake would be a promotional line in the reminder template: the 4,200 reminders would move from SAR 168.42 to 4,200 × 0.2159 = SAR 906.78, an extra SAR 738.36 a month — and every reminder would become a marketing message that patients who never opted in to offers should not receive. Portal codes stay at the domestic SAR 0.0401 rate because the clinic is registered in the Kingdom; a portal operated by a business registered abroad would pay the international authentication rate of SAR 0.224. The full rate card is in our Saudi pricing guide.

Running it on QuickWA

• Appointment booking and WhatsApp Flows for slot selection, plus Calendly sync if you already book there.
• Shared team inbox with assignment by branch or department and internal notes, so reception, the call centre and the branch manager see the same thread. No per-seat fees.
• Consent tracking that separates service consent from marketing consent, with automatic STOP opt-outs.
• No-code chatbot for opening hours, directions and insurance questions, with a handover to a person — WhatsApp's policy requires a clear route to a human.
• Developer API and signed webhooks to connect your clinic management system, so reminders go out from the real schedule.
• Coexistence, if reception wants to keep the WhatsApp Business app on the number patients already know (broadcast lists, labels and quick replies on that number move into the QuickWA inbox).

Plans start at $5/month, billed in USD, monthly or yearly at 20% less than twelve monthly payments, with no setup fee. Every plan, feature and message limit is shown after you sign up; AI, automation, calling and integrations are included from Pro. Meta bills your own WhatsApp Business Account directly — QuickWA adds 0% markup. Setup steps for the Kingdom are on our Saudi Arabia page and in our Saudi setup guide.

Sources

• Ministry of Health — booking appointments on Sehhaty: moh.gov.sa; MOH on Article 10 and advertising violations (21 Apr 2024): moh.gov.sa (checked 26 Oct 2026)
• MOH — Sehhaty scheduling, cancelling and text-message reminders (31 Jul 2022): moh.gov.sa (checked 26 Oct 2026)
• MOH statement on the Private Health Institutions System and advertising, as reported: Lexis Middle East, 18 Feb 2025 (checked 26 Oct 2026)
• PDPL Implementing Regulations — sensitive data, health data, consent, breach notice: Clyde & Co; penalties and enforcement date: Latham & Watkins (checked 26 Oct 2026)
• WhatsApp Business Messaging Policy and Commerce Policy (health information, sensitive identifiers, prohibited goods, human escalation): whatsappbusiness.com/policy (checked 26 Oct 2026)
• Meta — Pricing, including the per-number free service tier from 1 October 2026: developers.facebook.com/docs/whatsapp/pricing; template categorisation: developers.facebook.com (checked 26 Oct 2026)