Guide

Patient referrals: where each profession's ethics code lands

Summary

Yes — asking a current patient, once, in person or in writing, to mention you to friends or family who might benefit from care is not itself prohibited by any federal law or platform rule. What varies is everything downstream of the ask: whether your profession's ethics code treats soliciting referrals from an active patient as a boundary issue, whether you offer anything of value for the referral, and how you contact the people referred.

By Gale Editorial · Updated 2026-07-27. Every figure cited to a dated source. How we write.

Can You Ask? The Short Answer

Yes — asking a current patient, once, in person or in writing, to mention you to friends or family who might benefit from care is not itself prohibited by any federal law or platform rule. What varies is everything downstream of the ask: whether your profession's ethics code treats soliciting referrals from an active patient as a boundary issue, whether you offer anything of value for the referral, and how you contact the people referred.

The rest of this page works through each layer in order: the ethics-code question first, since it's the one a federal citation can't answer for you, then the HIPAA, FTC, and TCPA lines that apply regardless of discipline.

Why the Ethics Codes Treat This Differently From a Review Ask

Most disciplines' codes of ethics — counseling, psychology, social work, marriage and family therapy — address soliciting business from a current client somewhere in their sections on multiple relationships or exploitation, because the treatment relationship carries a power imbalance a review platform doesn't.

That doesn't mean asking is banned; it means the codes ask you to weigh whether the request could feel coercive to a patient who depends on you, and most resolve that by permitting a single, low-pressure ask with no expectation attached. Look up your own discipline's code and your state board's rules before building a referral-ask into your intake process — the boundary section is usually short, and it is the actual authority here, not a general marketing best-practice list.

The practical difference between codes tends to be tone rather than substance: some frame the concern narrowly, around anything that could be read as exploiting the relationship for gain, while others fold it into a broader statement about avoiding any appearance of coercion in a dependent relationship. Either framing lands on the same practice — ask once, ask plainly, and never make the ask feel tied to the quality of care the patient is receiving.

The reverse question — may i accept gifts from patients — sits under the same boundary logic in most codes, just pointed the other direction.

Where HIPAA Actually Applies

If you decide who to ask based on anything in the chart — patients who did well, patients who never missed a session — you've used protected health information to select recipients of what HIPAA treats as a marketing-adjacent communication, and that selection requires the patient's authorization 1. Asking every patient the same way, without a clinical filter, avoids the question because the criterion isn't drawn from treatment content.

This is the same logic that governs review-request selection: the fact that you're asking for a referral rather than a review doesn't change how HIPAA treats a chart-based filter.

If You Build a Referral-Reward Program

If a referral leads to a reward — a discount, a gift card, a free session — for the referring patient, that arrangement creates a material connection the referred friend can't see unless you disclose it, which is exactly what FTC endorsement policy requires when a recommendation and compensation are linked 2. If the reward is instead tied to a public review the friend leaves, the same incentivized-review ban that governs asking your own patients for reviews applies to them too 3.

Many solo practices skip the reward structure entirely for exactly this reason: an unrewarded referral needs no disclosure at all, while a rewarded one needs a disclosure workflow most solo practices aren't set up to run. If you do decide to run one, keep it simple — a single flat credit rather than a tiered or escalating reward, disclosed in the same message that thanks the referring patient, so the disclosure isn't a separate step someone has to remember.

A Family or Couple in the Room Complicates It

Family and couples work adds a layer the friend-referral scenario doesn't have: you may already know, through one person's treatment, that another family member could benefit from care of their own. Using that knowledge to steer a referral crosses a different line than a general ask, because it draws on information from one patient's treatment to target someone else, not just to select who gets asked.

The safer version keeps the ask general and addressed to the person actually in the room: "If it would be helpful, I'm happy to talk with [family member] separately, or point them toward someone else." That leaves the decision with the family, rather than you acting on details you learned about them secondhand through someone else's session.

Texting or Calling the Ask

If you send the referral ask as an automated text — "know someone who could use our services? forward this link" — sent to your patient list via practice-management software, the TCPA requires prior express consent from each recipient before the message goes out, the same rule that governs review-request and reminder texting 4. A verbal ask at the end of a session or a line in a printed handout doesn't carry that requirement.

Capture consent for this kind of message at the same intake step where you capture consent for appointment reminders, so you're not building a second consent process from scratch.

A Simple, Safe Way to Ask

The lowest-risk version is a single sentence, said once, with nothing attached: "If you know anyone who might benefit from this kind of care, feel free to pass along my information." No reward, no pressure, no repetition at every visit — asked once and left alone respects both the ethics-code concern about pressure and the HIPAA and FTC lines around incentives and disclosure.

  • Ask once, not at every visit. Repetition starts to read as pressure, which is the exact dynamic the ethics codes are watching for.
  • Offer nothing in return. No discount, no gift, no "thank you" credit — the moment a reward attaches, you're inside FTC endorsement and reviews-rule territory.
  • Let the patient initiate the contact. Hand them your card or a link to pass along themselves, rather than collecting their friend's contact information yourself.
  • Keep the ask off the chart. Don't note who you asked or how they responded in the clinical record — there's no clinical reason to, and it avoids creating a PHI trail tied to marketing.

For referral relationships with other clinicians rather than patients — a therapist down the street, a PCP's office — the compliance shape is different; that's covered separately as referral flow without buying it.

Common questions

Not inherently — most disciplines' ethics codes don't ban the request, but many flag soliciting business from a current patient in their sections on multiple relationships, because of the power imbalance in the treatment relationship. A single, low-pressure ask with nothing offered in return is the version that stays clearly inside the lines; repeated asks or anything that feels transactional is where codes start to object.

You can, but disclosure follows. A reward for a referral creates a material connection between the referring patient and their recommendation, and FTC endorsement policy requires that connection be disclosed to whoever receives the recommendation. If the reward is instead tied to the referred person leaving a public review, the same rule against incentivized reviews applies to them as well.

It restricts how you choose. Selecting recipients based on anything drawn from the clinical record uses protected health information to target a marketing-adjacent request, which requires the patient's authorization. Asking every patient the same way, without a chart-based filter, sidesteps the question because the criterion for asking isn't drawn from treatment content in the first place.

Only with consent if it's automated. A batch text sent through practice-management software needs prior express consent from each recipient under the TCPA before it goes out — being a current patient isn't consent by itself. A verbal ask at the end of a visit or a line on a printed handout doesn't carry that same requirement.

Keep it out of the clinical chart if you do — there's no treatment reason to note who referred whom in a patient's record, and doing so creates a PHI-adjacent marketing trail you don't need. A separate, non-clinical log of referral sources is the safer place for that information if you want to track what's working.

Run your practice on Gale

The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.

Start or manage a practice →

References

  1. 1.HHS Office for Civil Rights (2026). Marketing. U.S. Department of Health and Human Services. linkThat selecting who to ask for a referral using clinical record content is a use of PHI for marketing requiring patient authorization.
  2. 2.Federal Trade Commission (2023). FTC's Endorsement Guides: What People Are Asking. Federal Trade Commission (FTC). linkThat a reward tied to a patient's referral creates a material connection requiring disclosure under FTC endorsement policy.
  3. 3.Federal Trade Commission (2024). Federal Trade Commission Announces Final Rule Banning Fake Reviews and Testimonials. Federal Trade Commission (FTC) press release. linkThat incentivizing a referred person's public review is barred by the same 2024 rule against purchased and incentivized reviews.
  4. 4.Federal Communications Commission (2026). Telemarketing and robocalls. Federal Communications Commission. linkThat an automated referral-ask text sent via practice-management software requires prior express consent under the TCPA.

https://www.gale.care/for-providers/mrr-asking-patients-referrals · 4 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.

Findability, by specialty

How practices like yours get found in local search and AI answers — the honest playbook, per specialty.

SEO for private practices · SEO for AI search / answer engines (all verticals)