Clinics, hospitals, pharmacies and health NGOs in Rwanda can use SMS for appointment reminders, "your results are ready" notices, vaccination and antenatal prompts, and medication refill reminders. These are service messages to patients, so RURA's commercial-communication rules do not apply to them, but the content is often sensitive health data under Law No 058/2021: keep diagnoses out of the text, send to the patient's own number, and store records in Rwanda.
Last reviewed: 27 October 2026. This is general guidance, not legal or medical advice. Confirm data-protection questions with the NCSA.
What Rwanda has already shown with SMS in health
Rwanda has used text messaging in public health for well over a decade. UNICEF describes RapidSMS, the mobile system used by community health workers to track the health of pregnant women, newborns and young children: health workers register a woman as soon as they learn of a pregnancy, send short reports by SMS, and receive reminders so that women attend health centres before giving birth. Its "Red Alert" function sends an automated message when something goes wrong in pregnancy or delivery, so an ambulance can be dispatched. UNICEF reports that RapidSMS was piloted in 2009 and later extended to cover the first 1,000 days, from pregnancy to a child's second birthday.
RapidSMS is a government system run with the Ministry of Health, and private providers should not imply any link with it. The lesson for a private clinic or NGO is simpler: short, timely, well-targeted messages fit how Rwandans already use their phones.
The messages that matter
| Message | Typical timing | What to include | What to leave out |
|---|---|---|---|
| Appointment reminder | 48 hours and the morning before | Facility, date, time, how to reschedule | The department if it reveals a condition (for example HIV clinic) |
| Results ready | When the result is signed off | That a result is ready and how to collect it | The result itself |
| Vaccination or antenatal visit due | A week before, then the day before | Child's first name or visit number, venue | Medical history |
| Medication refill | Three to five days before supply runs out | Pharmacy, collection hours | The drug name |
| Missed appointment | Same day or next morning | A friendly prompt and a phone number | Warnings or blame |
| Health promotion campaign | 07:00 to 19:00 only | Who is sending, opt-out | Anything that looks like a diagnosis |
Health data under Law 058/2021
Rwanda's data protection law treats health status and medical records as sensitive personal data (Article 3). As summarised by DLA Piper, that brings extra duties that affect how you design messages and store contact lists:
- Separate or protected storage (Article 11). Sensitive data must be stored separately or protected with measures such as pseudonymisation or encryption. Keep the reminder list (name, number, appointment time) apart from the clinical record where possible.
- A data protection officer (Article 40). Large-scale processing of sensitive data can require one. Many hospitals will meet that threshold.
- Children (Article 9). For patients under 16, processing needs the consent of the person with parental responsibility. Send vaccination reminders to the parent.
- Registration and localisation (Articles 29 to 31 and 50). Register with the NCSA and store personal data in Rwanda unless your registration certificate authorises storage abroad.
- Breach notification (Article 43). Notify the NCSA within 48 hours of becoming aware of a breach.
The safest message is one a stranger could read without learning anything private. Phones in Rwanda are often shared within families, and SMS previews appear on locked screens.
Bwiza Hills Clinic: reminder of your appointment on {{date}} at {{time}}. To change it call 0788000000. Murakoze.
Bwiza Hills Clinic: your result is ready. Please collect it at reception Mon-Sat 08:00-17:00 with your ID. Questions: 0788000000
Does RURA's 7pm rule apply?
Not to reminders. RURA's Regulation No 001/R/STD-CMR/RURA/018 bans commercial communications between 19:00 and 07:00 (Article 15), but Article 4 excludes messages that deliver a service the recipient agreed to or that relate to an ongoing relationship such as membership or an account. An appointment reminder is part of the service the patient booked. Article 4 also excludes communications by public institutions authorised by RURA in an emergency or in the public interest, including health; that exclusion is for public bodies, so a private clinic's promotional campaign (a new dental service, a discounted check-up) is commercial and needs consent, an opt-out and daytime sending.
Even for reminders, sensible timing helps: send in the morning or early evening rather than late at night, unless it is urgent.
Antenatal and child-health programmes
NGOs and private maternity services often run reminder programmes alongside the public system. Keep messages short and practical, and agree the wording with the clinical lead. Kinyarwanda is the language most mothers read first; it fits the GSM-7 character set, so a Kinyarwanda message can still use 160 characters. Have it written and checked by a native-speaking health worker rather than translated by software.
Ubuzima Mothers Programme: your visit {{visit}} is due on {{date}} at {{facility}}. Bring your card. Help: 0788000000
Ubuzima Mothers Programme: {{child}} is due for vaccination on {{date}} at {{facility}}. Questions? Call 0788000000
Confirmations and rescheduling
Standard A2P sender IDs in Rwanda cannot receive replies, so "reply 1 to confirm" will not reach you. Three options work:
- a short link to a confirm or reschedule page, using eSMS short links so you can see who clicked;
- a phone number for the booking desk, printed in every message;
- a two-way number, available in Rwanda on request, if you want patients to reply with a keyword.
Connecting your booking system
Most clinics schedule reminders from their booking or hospital information system. The simplest integration calls the eSMS API when an appointment is created or changed, using the bulk endpoint each morning for the next day's list.
POST https://sms.esmsafrica.io/api/messages/send-bulk
Authorization: Bearer esms_live_...
Content-Type: application/json
{
"sender_id": "BWIZAHILLS",
"text": "Bwiza Hills Clinic: reminder of your appointment on {{date}} at {{time}}. To change it call 0788000000.",
"recipients": [
{"to": "+250788123456", "name": "Uwase", "vars": {"date": "12 Nov", "time": "09:30"}},
{"to": "+250733456789", "name": "Habimana", "vars": {"date": "12 Nov", "time": "10:15"}}
]
}
Use the delivery-report webhook to flag patients whose reminders failed, so reception can call them instead. The HTTP API documentation lists the fields; dashboard users can import a CSV and schedule the same message without code.
Costs
A one-segment reminder to a Rwandan number costs RWF 21 ($0.0142) at the basic tier, falling to RWF 16 and RWF 10 as volume grows. A clinic that sends two reminders per appointment can estimate its monthly cost as appointments multiplied by two, times the rate. Sender ID registration in Rwanda is a one-time USD 100 covering MTN and Airtel. Live rates are on the pricing page.
Checklist
- Templates reviewed by a clinician: no diagnoses, drug names or department names that reveal a condition.
- Patient's own number confirmed at registration, with consent to SMS reminders recorded.
- Parents recorded as contacts for patients under 16.
- Reminder list stored separately from the clinical record and access limited by role.
- NCSA registration in place and data stored in Rwanda.
- Promotional health campaigns on a separate list with an opt-out, sent 07:00 to 19:00.
- Failed reminders routed to reception for a phone call.
Frequently asked questions
Can we send test results by SMS?
We advise against it. A result is sensitive health data and an SMS can be read by anyone holding the phone. Send a "result ready" notice and release the result in person, by phone after identity checks, or through a secure portal.
Do patients need to opt in to reminders?
Reminders are part of the service the patient booked, which RURA's Article 4 excludes from the commercial rules. Recording the patient's agreement to SMS contact at registration is still good practice under Law 058/2021, and it protects you if a family member complains.
Can a public health campaign go out at night?
RURA's Article 4 excludes communications by public institutions authorised by RURA in an emergency or in the public interest, including health. Private clinics and most NGOs are not public institutions, so plan daytime sending for campaigns.
Which sender ID should a clinic use?
A short version of the facility's real name, up to 11 characters, registered with MTN and Airtel. Avoid names that reveal a specialism patients may not want others to see.
Sources
- UNICEF - When text messages save lives (RapidSMS in Rwanda)
- DLA Piper - Data protection laws of Rwanda (Law No 058/2021)
- RURA - Regulation governing unsolicited commercial communications (PDF)
- Rwanda Ministry of Health
- Telerivet - Rwanda SMS compliance: replies on A2P routes
See sample messages and compliance notes on our page for healthcare SMS in Rwanda, read Rwanda's data protection law and SMS and handling STOP without replies, check sender ID registration in Rwanda, and create a free account to test reminders with a free test key.


