Dental appointment texts and chat: what a patient message thread gives away in ChatGPT or Claude.

Reception at a dental practice runs on text messages and web chat: reminders, reschedules, questions about cost, a spouse ringing on a patient’s behalf and the occasional angry message. Staff paste whole threads into ChatGPT or Claude to draft a reply, to summarise a long exchange or to keep the tone right. The thread carries first names, appointment times, medical remarks that patients make casually, card payments and complaints. This page marks every item in a typical week’s messages that the Privacy Act and the Dental Board’s Code of conduct bear on, and shows how the same thread is handled on Ermos inside the practice.

The appointment texts and web chat

Sent and received through the practice’s SMS and web chat tools across a working week. Reception staff paste a thread into an AI tool when they need a reply written quickly or a long exchange summarised for the dentist.

An invented message thread. The practice, staff and patients are fictional; the card digits are a placeholder. Hover or tap any highlighted item for the analysis; the full list is below.

What leaves the practice

1. 1
   A named patient and an appointment

   A first name, a dentist, a date and a place. A reminder text, but it is a statement that the person is a patient of the practice, which is itself health information. Patient data guide.

2. 2
   A spouse volunteering medical information

   A wife describing her husband’s medication and sleep pattern. Health information about a third party, offered by someone who is not the patient. Patient data guide.

3. 3
   The staff reply about consent

   A receptionist explaining that the practice needs the patient’s agreement before discussing his appointment with his wife. Section 3.3 of the Code asks practitioners to seek informed consent before disclosing information. This wording is the practice’s own and tells the AI company nothing about anyone.

4. 4
   A card payment and an instalment request

   A card type and ending digits, and a request to pay in two parts. Financial information; the digits are a placeholder here, but a real thread often carries more. Privacy Act guide.

5. 5
   The standard opt-out wording

   The practice’s own template line for confirming or opting out. Generic and about nobody.

6. 6
   A complaint in the patient’s words

   Anger about a fee, a statement about unemployment and a demand to speak to the dentist. Personal information and the start of a complaint file under section 4.6 of the Code. Privacy Act guide.

7. 7
   A pregnancy and a work roster

   A pregnancy at 16 weeks and a night shift ending at 7am. Health information is sensitive information under the Privacy Act, and the roster says when she is away from home. Patient data guide.

What happens in Frontier Models (ChatGPT, Claude)

• The whole document is transmitted to the provider’s servers. On personal plans the user cannot choose where it is stored or processed, and for the major providers that has generally meant outside Australia, under that country’s legal process. Some business plans offer storage in Australia, but the provider still receives the content.
• On consumer tiers, prompts can be retained and used to train future models.
• The provider’s staff and systems can reach the content under the provider’s own policies.
• Once sent, the practice no longer controls it. Retention and deletion happen on the provider’s terms.

The same document on Ermos

Part of AI data leakage in dental practices.

Common questions