Quick answer. Never paste client health information into an AI tool. Describe requests in general terms, use client codes instead of names, and let the AI write the frame while your staff add specifics in your own system. The workflows here are built that way: the inquiry reply moves health questions to the in-person assessment, the open-shift text uses a code and a town, and the family update is a template filled outside the chat.
Why a workflow beats a one-off prompt
A home care office writes constantly: inquiry replies, shift texts, schedule changes, welcome letters, caregiver memos and job posts. Nearly all of it brushes against someone's health or private life, which is exactly what can't go into a chat window. The answer isn't to skip AI; it's to design each workflow so the AI never needs the private part. The time savings come from the wording and the structure, and the client's details stay where they already are.
Each workflow has five parts: the job it does, a prompt template with [BRACKETS] to fill, an example input with the kind of output to expect, a check before you send (facts, numbers, names, tone), and a privacy rule. Every prompt ends by telling the AI to write [CHECK] instead of guessing, so missing facts show up instead of being invented.
Three workflows you can run today
1. First reply to a family's care inquiry
Prompt template (replace every [BRACKET] with your facts):
You are writing for a non-medical home care agency. Write a first reply (under 160 words) to a family member who asked about care for a relative. What they asked, with no names or health details: [GENERAL QUESTION, E.G., "help with bathing and meals, weekday mornings"]. Our services that fit: [SERVICES]; minimum visit length [HOURS]; posted rate [RATE] or "we'll confirm after the assessment"; service area [TOWNS]. Next step: a free in-home assessment [TIMES], where we'll talk about health needs in person. Say we'll keep their information private. Don't mention diagnoses, conditions or medications, and don't promise a specific caregiver or start date. If any fact you need is missing, write [CHECK] instead of guessing. After the draft, list every [CHECK] and anything you assumed.
Example input: Daughter asked about help with bathing, meals and light housekeeping on weekday mornings for her father; services: personal care, meal prep, homemaking; 4-hour minimum; $34/hour; Union County; assessment Tue or Thu.
What to expect: Expect a warm, short reply that names the matching services, the 4-hour minimum and posted rate, the service area, two assessment times and a privacy line, with nothing about the father's health.
Check before you send:
- Facts: services, minimums and service area are what you actually offer.
- Numbers: rate and minimum hours match your current rate sheet.
- Names: agency name and phone right; no client names in the draft.
- Tone: kind and unhurried; no pressure to sign.
Privacy rule: Never paste client health information: no diagnoses, medications, conditions, care plans, names with ages or addresses. Describe the request in general terms only.
Rule to know: HHS's HIPAA Privacy Rule summary says protected health information includes common identifiers such as name, address and birth date when linked to health information, and covered entities must limit uses and disclosures to the minimum necessary. Whether or not HIPAA applies to your agency, keep client health information out of AI tools. (HHS)
2. Open-shift text to caregivers (no client details)
Prompt template (replace every [BRACKET] with your facts):
Write a text (under 60 words) to our caregiver group about an open shift. Client code [CODE]; town [TOWN, NO STREET ADDRESS]; date and hours [DATE, START-END]; general tasks [E.G., PERSONAL CARE, MEALS, COMPANIONSHIP, NO DIAGNOSIS]; pay [RATE OR "your usual rate"]; how to claim it ["Reply YES; first confirmed by the scheduler gets it"]. Don't include the client's name, street address, door codes or any health condition. If any fact you need is missing, write [CHECK] instead of guessing. After the draft, list every [CHECK] and anything you assumed.
Example input: Client C-114, Westfield, Sat Nov 15, 8 a.m. to 12 p.m., personal care and meal prep, usual rate.
What to expect: Expect a short text: "Open shift: Sat Nov 15, 8 a.m. to 12 p.m., Westfield (client C-114). Personal care and meals. Usual rate. Reply YES; the scheduler will confirm."
Check before you send:
- Facts: tasks are general; the full care plan goes to the confirmed caregiver through your normal system.
- Numbers: date, hours and day of the week match; count this shift toward the caregiver's weekly hours for overtime.
- Names: client code only; no name, street or door code.
- Tone: clear and respectful of caregivers' time.
Privacy rule: Client codes, not names. Never paste addresses, key codes, care plans or health conditions.
Rule to know: The U.S. Department of Labor says third-party employers such as home care agencies must pay at least the federal minimum wage and overtime to direct care workers they employ, and keep records of hours worked. Check your state's wage rules too. (U.S. Department of Labor)
3. Caregiver job post
Prompt template (replace every [BRACKET] with your facts):
Write a job post for a [CAREGIVER / HOME HEALTH AIDE / COMPANION] at our home care agency. Facts: duties [LIST]; required certifications or training [LIST, AS REQUIRED IN OUR STATE]; driver's license and car needed [YES/NO]; pay [RANGE, HOURLY]; overtime paid at [RATE RULE WE FOLLOW]; schedule options [LIST]; benefits [LIST]; how to apply [HOW]. Describe the job and skills. Don't use words that suggest a preferred age, sex, religion, national origin or other personal trait (no "young", "energetic young", "female preferred", "native English"). If English or another language is needed for the work, say what level and why. If any fact you need is missing, write [CHECK] instead of guessing. After the draft, list every [CHECK] and anything you assumed.
Example input: Caregiver: personal care, meal prep, light housekeeping, companionship, errands; state certification required; car needed; $19 to $23/hr; overtime at time and a half over 40 hours; weekday and weekend shifts; paid training.
What to expect: Expect a headline, a short agency paragraph, duties and requirements lists, pay with the overtime line, schedules, benefits and how to apply, with no age or gender words.
Check before you send:
- Facts: duties, requirements and benefits are real and current.
- Numbers: pay range and overtime rule right.
- Names: certification names correct for your state.
- Tone: describes the work, not the ideal person. Client requests for a caregiver of a certain sex or age go to your HR adviser, not into the ad.
Privacy rule: No current caregiver or client details.
Rule to know: The EEOC says it's illegal to publish a job advertisement that shows a preference for or discourages someone from applying because of race, color, religion, sex, national origin, age (40 or older), disability or genetic information. (EEOC)
How many hours would they give back?
Fill in at least one workflow.
Rules to know before you post or send
Never paste client health information. HHS's summary of the HIPAA Privacy Rule explains that the rule covers health plans, clearinghouses and health care providers that transmit health information electronically in standard transactions, that protected health information includes common identifiers such as name, address and birth date when tied to health information, and that covered entities must limit uses and disclosures to the minimum necessary (HHS HIPAA summary). Whether HIPAA applies to your agency depends on what you do and how you bill; ask your attorney. Either way, the workflows treat every client detail as off limits for AI tools.
The U.S. Department of Labor says third-party employers such as home care agencies must pay direct care workers at least the federal minimum wage and overtime and keep records of hours worked (DOL direct care page), which is why the open-shift and timekeeping workflows remind you to count hours. The EEOC says it's illegal to publish a job ad that shows a preference for or discourages applicants because of race, color, religion, sex, national origin, age (40 or older), disability or genetic information (EEOC). Check your state's licensing and wage rules too.
What stays out of the chat
Whatever the workflow, don't paste Social Security numbers, ITINs, driver's license or passport numbers, or photos of IDs; bank, card or loan account numbers and routing numbers; health information about a named person: diagnoses, medications, allergies, disability details; passwords and door, lockbox, alarm or gate codes; signed contracts, leases or applications with personal details still on them; anything a client told you in confidence. Use first names or roles, type only the facts a draft needs, and set your AI tool's chat history and training options to the most private choice it offers. The FTC's guide for businesses puts it as take stock, scale down, lock it, pitch it and plan ahead (FTC). If staff use AI tools too, the Small Business AI Use Policy Kit puts these rules in a written policy. The free AI tool risk check shows how much business data is going into AI tools now.
All 13 workflows in the kit
- First reply to a family's care inquiry
- Open-shift text to caregivers (no client details)
- Caregiver job post
- Schedule change notice to the family
- Welcome letter for new clients and families
- Weekly family update template (you fill it outside the chat)
- Caregiver policy reminder memo
- In-service training recap and quiz
- Thank-you note to referral partners
- Caregiver introduction for the family
- Storm and holiday coverage plan message
- Replies to online reviews without confirming anyone is a client
- Review request to every family
Each comes with the same five parts as the samples above. Related: Hiring Your First Employee Kit · NJ Small Employer HR Kit. Other trades: real estate agents · contractors and home service pros · salons and beauty pros · restaurants and food vendors · landlords and property managers · freelancers and creatives · auto repair shops · insurance agents · fitness studios and personal trainers · retail shops and boutiques · nonprofits. Or start at the AI workflows hub.
Sources
- HHS: Summary of the HIPAA Privacy Rule
- U.S. Department of Labor: Direct care workers, minimum wage, overtime and recordkeeping
- EEOC: Prohibited employment policies and practices
- FTC: The Consumer Reviews and Testimonials Rule, questions and answers
- FTC: Protecting personal information, a guide for business
General information checked November 2026 against the official sources above, not legal advice. Check your state and local rules. No AI product or vendor is recommended; the workflows work in any chat assistant. The calculator runs in your browser, and nothing you enter is sent or saved.
Common questions
Can my agency use AI tools at all with HIPAA in mind?
Yes, for work that doesn't involve client information: templates, job posts, staff memos, inquiry replies written in general terms. Never paste client health information, names with conditions, care plans or visit notes. Whether HIPAA applies to your agency is a question for your attorney; the safe habit is the same either way.
How do I text caregivers about an open shift without sharing client details?
Use a client code, the town (not the street), the date and hours, and general tasks like personal care or meal prep. The full care plan goes to the confirmed caregiver through your normal system. The open-shift workflow writes that text.
Do caregivers get overtime?
The Department of Labor says home care agencies, as third-party employers, must pay direct care workers at least the federal minimum wage and overtime, and keep records of hours worked. Your state may set higher wages. Count every extra shift toward the week's hours.
A family asked for a caregiver of a certain sex or age. What do I put in the job ad?
Nothing about it. The EEOC says job ads can't show a preference by sex, age (40+) or other protected characteristics. Handle client requests about caregiver matching with your HR adviser or attorney, not in the ad.
How should we reply to a review from a client's relative?
Thank them and invite them to call, without confirming or denying that anyone is a client and without mentioning care, schedules or health, even if the review does. The review workflow writes that kind of reply.