What Is This Product?
Grasshopper is a second-line phone service that allows you to separate your business and personal texts and calls while carrying just one phone.
Like GoDaddy’s SmartLine and Sideline, Grasshopper is unlike GoogleVoice and does not use VoIP (Voice over Internet Protocol) and instead uses the cellular network. Just as with SmartLine and Sideline, those of you who have seen our article on VoIP might be thinking Grasshopper could be an option for your second line needs, one that does not require a BAA, since Grasshopper uses the cellular network. Unfortunately, Grasshopper is not a HIPAA secure option; even though they do not use VoIP and use the cellular network for call and SMS transmission, it is a cloud service (operative word being cloud) and Grasshopper is handling and storing data — including PHI — which means there is a business associate relationship in place; but Grasshopper does not offer, and will not execute, a BAA. They also do not qualify for the conduit exception (which is extremely rare.)
For more details on HIPAA business associates (and how this applies to all cloud services) please see Roy’s article, “What is a HIPAA Business Associate?” For an explanation of HIPAA-security and ethics considerations pertaining to second-line phone service, please check out our "CE for OH" session, "How to Make Ethical & HIPAA Compliant Decisions for Internet Phone & Secure Email in Your Practice" (access to this course, and all CE for OH courses, is included in membership.)