Important: HIPAApropriateness reviews, including their summaries, are for informational purposes only. They are neither consultation nor legal advice. Be aware that while we do our best to be thorough and complete, information may be missing or possibly even inaccurate. Products also change quickly, and the review may become out of date. By continuing to read, you agree to use the information in HIPAApropriateness reviews and their summaries at your own risk.

Vital Stats

HIPAA compliance with this product appears possible?: No.
Recommend for your HIPAA risk management needs?: No.

What Is This Product?

Grasshopper is a second-line phone service that allows you to separate your business and personal texts and calls while carrying just one phone.

Like GoDaddy’s SmartLine and Sideline, Grasshopper is unlike GoogleVoice and does not use VoIP (Voice over Internet Protocol) and instead uses the cellular network. Just as with SmartLine and Sideline, those of you who have seen our article on VoIP might be thinking Grasshopper could be an option for your second line needs, one that does not require a BAA, since Grasshopper uses the cellular network. Unfortunately, Grasshopper is not a HIPAA secure option; even though they do not use VoIP and use the cellular network for call and SMS transmission, it is a cloud service (operative word being cloud) and Grasshopper is handling and storing data — including PHI — which means there is a business associate relationship in place; but Grasshopper does not offer, and will not execute, a BAA. They also do not qualify for the conduit exception (which is extremely rare.)

For more details on HIPAA business associates (and how this applies to all cloud services) please see Roy’s article,  “What is a HIPAA Business Associate?” For an explanation of HIPAA-security and ethics considerations pertaining to second-line phone service, please check out our "CE for OH" session, "How to Make Ethical & HIPAA Compliant Decisions for Internet Phone & Secure Email in Your Practice" (access to this course, and all CE for OH courses, is included in membership.)

One more step to see this essential information...

To access this content, you must purchase a subscription to Person-Centered Tech Support, or log in if you have a paid membership already.

Person-Centered Tech Support is our full-featured support service that includes all the following:

  • Unlimited access to weekly sessions with Roy to ask whatever you need.
  • 8 CE hours on the basics of HIPAA, ethics, tech and security so you can get oriented to what you need to do.
  • Unlimited access to HIPAA-propriateness Reviews of popular therapy tech products, so you know which products are safe to use and which should be avoided.
  • Unlimited right to request new HIPAA-propriateness Reviews on whatever products you need us to research for you.
  • Unlimited access to the Video Help Center, where helpful, slowly-paced videos take you though essential basics like encrypting your gear.

Learn More→