In short and in plain language
This article is about chat apps on the phone in care services. Staff often use them to write to relatives quickly.
This is a risk for data protection. The app can pass on numbers from the address book.
Details about illness or wounds need special protection. Nurses also have a duty to keep things private.
Your website can replace this channel. For example with a form and consent, a call back, online booking and a protected area.
We set up this channel on your website.
Reaching for the smartphone is a reflex in everyday care: a relative asks quickly via WhatsApp how the night went, a carer sends a photo of the wound dressing, the rota update lands in the team group. WhatsApp reaches around 50 million people in Germany, roughly 80 percent of the German-speaking population aged 14 and over (smart-home-fox). What feels convenient is delicate for a care service: WhatsApp and WhatsApp Business do not meet the requirements of the GDPR and the German Federal Data Protection Act and are considered an unsuitable communication channel for care providers (teamwire guide 12/2025; datenschutzgerechte-pflege.de). This article shows why WhatsApp communication with relatives becomes a data protection risk and how a data-thrifty contact and messaging channel on your own website serves the same purpose without giving sensitive data away. Messengers are among the most-used online services in Germany (Bitkom).
Key takeaways
- WhatsApp is convenient and widespread: around 50 million users in Germany, some 80 percent of the population aged 14 and over (smart-home-fox). It is exactly this reach that tempts care services to adopt the channel without scrutiny.
- WhatsApp Business does not meet GDPR and Federal Data Protection Act requirements and is, in practice, an unsuitable communication channel for care providers (teamwire; datenschutzgerechte-pflege.de). The core issue is the transfer of contact data to Meta in the USA.
- During setup and afterwards, the app syncs the entire address book and transfers phone numbers to Meta, including those of people who do not use WhatsApp and never consented. This processing usually lacks a legal basis under Article 6 GDPR.
- Details on diagnosis, wound or care level are health data of the special category (Article 9 GDPR). Carers are additionally bound by professional secrecy (Section 203 Criminal Code), which can be touched merely by holding professional contacts on the phone.
- A GDPR-compliant contact and messaging channel on your own website replaces the WhatsApp reflex: a contact form with consent, a callback, online booking and a protected area keep data in Germany and strengthen relatives' trust.
Why WhatsApp is so tempting in daily care
The appeal of WhatsApp is easy to explain: the messenger is already on almost every smartphone, everyone knows how to use it, and a message is typed in seconds. Around 97 percent of respondents know the app, and 83 percent of them use it regularly (Statista Consumer Insights). For a care service that means relatives expect the quick, informal reply, and staff instinctively reach for the familiar tool. Short questions about medication, a photo of the skin's condition, the spontaneous cancellation of an appointment, all of it seems to run smoothly. The price of this convenience only becomes visible when you ask where the data flows.
The audience of caring relatives is large and digitally reachable. In December 2023, around 5.69 million people in Germany needed care, 86 percent of them cared for at home (Federal Statistical Office). A large part of this home care rests on relatives juggling work, family and support, grateful for any quick line to the service. This legitimate need for uncomplicated communication is real, and it does not disappear when you switch off WhatsApp. It only has to be redirected to a channel that protects the sensitive data instead of handing it to a corporation in a third country. How to shape the content of that line to relatives is shown by the article on content for relatives on a care website.
The figures at a glance
Where WhatsApp collides with data protection
The biggest problem does not arise when a message is sent but already when the app is set up. WhatsApp syncs the smartphone's entire address book with its own servers and transfers the phone numbers of all stored contacts to Meta in the USA, including those of people who do not use WhatsApp at all and never agreed to it (externer Datenschutzbeauftragter Dresden). This transfer requires a legal basis under Article 6 GDPR, which is missing in practice: the affected contacts have not consented, and an overriding legitimate interest is hard to establish. A care service that installs WhatsApp on a work phone holding client and relative contacts therefore stands with one foot in breach before the first chat. The following six points summarise where the app collides in a care context.
Data transfer to the USA
WhatsApp transfers contact and usage data to Meta in a third country. For anything health-related this transfer is especially critical and usually without a sound legal basis (externer Datenschutzbeauftragter Dresden).
Address book sync
The app reads the entire address book and sends phone numbers to Meta, including non-users without consent. That is processing without a legal basis under Article 6 GDPR.
No workable processing agreement
For the standard app no clean data processing agreement under Article 28 GDPR can be concluded. The controller keeps the obligations without being able to steer the data flows.
Data subject rights out of reach
Access, erasure and proof of which data flowed where are hard to deliver over a chat history. The rights under Article 15 GDPR run into a void.
Metadata and interception
Even with end-to-end encryption of content, metadata accrues: who writes to whom and when. In a care context this allows conclusions about who is being cared for.
Private and work mixed
On a carer's private phone, professional and private messages blur. Client data then sits outside any control of the service, including backups in third-party clouds.
Health data and professional secrecy
In care, messages are almost never trivial. As soon as a relative asks about blood sugar, a carer sends a wound photo or the care level is mentioned, health data arises. This belongs to the special category of personal data and enjoys heightened protection (Article 9 GDPR). Its processing is generally prohibited and permitted only under narrow conditions, such as explicit consent. Over a messenger that transfers data to a third country, this heightened protection cannot be guaranteed. On top of that comes the criminally sanctioned duty of confidentiality: carers are among the professionals bound by secrecy under Section 203 of the German Criminal Code, and merely storing professional contacts on a smartphone with WhatsApp installed can touch that duty (externer Datenschutzbeauftragter Dresden). What should never run over WhatsApp is summarised in the list below. The formal safeguarding of such channels is explored in the article on data protection for care forms.
- Diagnoses, findings and care-level details do not belong in a chat that transfers data to a third country (Article 9 GDPR)
- Wound photos and other health-related images are especially worthy of protection and not meant for messengers
- Names and addresses of clients must not reach third parties via the automatically synced address book (Article 6 GDPR)
- Professional contacts on a private phone mix confidentiality with daily life and touch Section 203 Criminal Code
- Voice messages relating to clients end up unencrypted in backups outside the service's control
- Internal rotas with initials and locations are not harmless data but reveal who is being cared for
What relatives actually expect
Relatives do not want a particular app, they want a fast, reliable answer. Studies on digitalisation in care show a mixed picture: many relatives are open to digital offerings and use messengers in daily life, but in a health context they react positively as soon as data protection, transparency and ease of use are ensured (bibliomed-pflege, qualitative study). That is precisely the opportunity for your own website channel: it can offer the same short line without the drawbacks of a foreign messenger. A visible note that messages stay on German servers and are processed only with consent does not act as a hurdle with a sensitive audience but as proof of trust. How strongly such signals affect enquiries is described in the article on more enquiries through the care website, and the role reviews play is shown by the piece on reviews and trust on the website.
The website channel as a safe alternative
Your own site can do everything relatives value about WhatsApp while keeping control of the data. Instead of relying on a messenger in a third country, a well-built care website bundles several low-threshold channels that stay in the browser or end on servers in Germany. It is important that these routes cost as few clicks as a chat message, because only then do they replace the reflex to the green icon. Six building blocks turn the website into a full, data-thrifty communication channel.
Contact form with consent
A lean form asks only for the essentials and actively obtains consent to being contacted. The message lands on a server in Germany, not with a third party.
Callback button
A clickable callback request with phone number and preferred time replaces the quick chat question. Relatives give only their number, no health datum, and the service calls back.
Online appointment booking
First conversations and advice slots can be booked directly. That eases the phone and turns a loose enquiry into a firm appointment, as the article on online booking shows.
Protected relatives' area
A password-protected area can bundle updates and documents without them running over an open messenger. Access only for authorised relatives.
Supervised website chat
A data-thrifty chat or AI assistant on the site answers standard questions and routes sensitive matters into the secured form. It runs on your own infrastructure.
Updates by email
Short status or appointment notes go as encrypted email to confirmed addresses. For general information without a health reference, a simple, controllable route.
WhatsApp or website channel compared
| Feature | Communication via WhatsApp | Channel on your own website |
|---|---|---|
| Where data is stored | Meta servers, also in the USA | Servers in Germany, under your control |
| Address book | Synced and transferred | Untouched, no access |
| Health data | No sound protection in the chat | Separated, collected only with consent |
| Consent | Missing for contacts and usage | Actively obtained before contact |
| Verifiability | Chat history hard to prove | Form and log documented |
| Professional secrecy | Section 203 Criminal Code touched | Channel designed for confidentiality |
The comparison makes clear that this is not about doing without but about relocating. The website channel offers the same speed but keeps the data where the care service can be accountable for it. Internal team communication, which on WhatsApp often runs in groups with rotas, belongs in a closed system anyway rather than an open messenger. For the staffing side it is also worth looking at the career page and recruiting, where applicant communication should be just as data-thrifty.
Obtaining consent correctly
Even the best website channel needs a clean legal basis. Personal data may only be collected if consent exists or another basis under Article 6 GDPR applies, and for health data explicit consent under Article 9 GDPR is the rule. The principle of data minimisation (Article 5 GDPR) requires asking only for what is necessary for the given purpose: a callback needs a name and a phone number, not a diagnosis. Consent must be freely given, informed and in plain language, with a note on who processes the data and how long it is stored. How these requirements combine with a legally sound imprint and the rules of the German Medicinal Products Advertising Act is covered by the article on the legally compliant care website.
These mistakes cost trust
Rollout in the first weeks
The switch succeeds step by step and without relatives suddenly facing a closed door. The order below prioritises by impact per effort: first the replacement channel, then the safeguarding, then communicating the change. Within a few weeks a channel stands that replaces the WhatsApp reflex rather than merely banning it.
- Week 1: Take stock of what WhatsApp is used for today, split by relatives, clients and the internal team
- Week 2: Set up a contact form with active consent and a callback button on the website, data on a German server
- Week 3: Add online appointment booking for first conversations and advice so loose enquiries become firm slots
- Week 4: Review data minimisation, weigh every field against its purpose, no health data in the first step
- Week 5: Move the internal team to a closed system and take rotas out of open groups
- Week 6: Inform relatives actively, make the new route visible on the home page and in the signature
- Week 7: Train staff, remove WhatsApp from work phones and clearly separate private use
- Week 8: Define retention periods, the access process and responsibilities, and document them in writing
The ongoing effort stays manageable if the channels are kept lean from the start and responsibilities are clearly assigned in the team. The right frame is provided by the care website, the booking logic by the article on online booking for care advice, and open questions on the concrete build we are happy to clarify in a personal conversation. Anyone wanting to test the website chat as relief for the phone will find pointers in the article on the AI chatbot on the care website. And because the same data thrift also affects recruiting, it is worth looking at the employee referral careers page and the route to winning career changers through the website.
Sources
Related Articles
ePA in care: what relatives want to know about access
The ePA in care: what the care service sees, who adds entries, how relatives object or act as representatives, and how a guide page answers these questions.
Newsletter for Care Services: Retain Relatives Long-Term
How a compliant double opt-in newsletter keeps caring relatives engaged for months, answers their questions and turns prospects into clients and advocates.
Privacy on Care Websites: Secure Forms
GDPR-compliant contact and application forms for care services: handle sensitive health data, choose hosting in Germany, use SSL and a clean data flow.