Compliance · informational
TCPA Basics for Local Service Businesses: What Your Missed-Call Follow-Up System Must Get Right
TCPA compliance for automated follow-up texts and calls after missed calls — express consent rules, PBR exceptions, and what local businesses must document…
The fine runs $500 to $1,500. Per message. The FCC does not care that you are a two-truck plumbing company. The Telephone Consumer Protection Act was written in 1991 to stop telemarketers from burning up consumers’ phone lines, and courts and class-action attorneys have spent the last decade making very clear it applies to every small HVAC shop, dental office, and law firm that texts customers through an automated platform.
If you are running — or thinking about running — an automated missed-call follow-up system, this guide explains what the TCPA actually requires, where the real landmines are, and what you need documented before a single automated text or call goes out.
For a broader look at where TCPA fits alongside HIPAA and other call-compliance obligations, start with our HIPAA, TCPA & Call Compliance for Service Businesses pillar guide. This article goes deeper on the missed-call follow-up piece specifically.
What the TCPA Actually Prohibits
The TCPA restricts “auto-dialers” and “artificial or prerecorded voice” systems used to contact people on their mobile phones without their consent. In practice, a few things matter here:
- Auto-dialer definition: The FCC’s definition has been contested in court, but the working rule is: any system that can automatically send texts or calls without a human manually initiating each one. Your CRM’s automated follow-up sequence qualifies. A missed-call text triggered automatically when someone hangs up qualifies.
- Mobile vs. landline: The TCPA’s strongest restrictions apply to mobile numbers. Business landlines have a different (lower) protection level.
- The residential number question: If a customer gave you a mobile number on a service request form, that number gets full TCPA protection regardless of whether they use it for business.
The statute has two tiers of consent: prior express consent (lower bar, covers transactional and informational messages) and prior express written consent (higher bar, required for marketing). Getting those confused is how businesses end up in trouble.
Prior Business Relationship: What It Covers and What It Doesn’t
There is a real, defensible concept in TCPA law called the prior business relationship, or PBR. It matters for your missed-call follow-up system.
When someone calls your office, submits a web form asking for a quote, or schedules a service visit, they have initiated a business relationship with you. The FCC has taken the position that this implies consent to be called or texted back on the number they provided, in connection with that request.
What PBR generally covers:
- Calling back a number that called you during business hours
- Sending a text that says “We missed your call — can we help you with your HVAC issue? Call us at [number].”
- Confirming an appointment someone booked
- Sending a service reminder tied to work they requested
What PBR does NOT cover:
- Adding that number to a general marketing drip sequence
- Sending promotions, seasonal offers, or upsells to numbers collected through service requests
- Texting someone who called six months ago to let them know about your spring tune-up special
The line is this: if the message facilitates or completes the transaction they initiated, PBR typically applies. If the message tries to generate new revenue from a contact you collected, you need express written consent.
Express Written Consent: What “Written” Actually Means
For marketing texts and calls — anything designed to sell — you need prior express written consent. “Written” under the TCPA does not require a signature on paper. It can be:
- A checkbox on a web form (pre-checked does not count — it must be an affirmative action)
- A text-to-join opt-in (e.g., “Text YES to receive offers from [Company]”)
- An electronic signature via a digital form
What the consent must include, at minimum:
- The consumer’s phone number
- An affirmative opt-in action (not passive)
- Clear disclosure that they are agreeing to receive automated calls or texts
- Disclosure of who will be contacting them (your business name)
- Language noting that consent is not required to purchase
That last point matters. You cannot gate a quote or a service call on someone agreeing to receive marketing texts. The consent has to be genuinely voluntary.
Store every consent record. The timestamp, the IP address, the form version, the exact consent language — keep it. If you get a complaint or a demand letter, the burden falls on you to prove consent existed.
The Specific Risks in a Missed-Call Follow-Up System
Here is where most local businesses get into trouble. They set up a system — whether it’s their CRM, their AI receptionist, or a simple Zapier workflow — that auto-texts anyone who called and didn’t leave a voicemail. It feels obviously fine. They called you. Of course you can follow up.
The risk is not in the first call-back text. It’s in what comes next.
Scenario that’s generally fine:
- Someone calls your HVAC line at 7 PM. You’re closed. Your system sends: “We missed your call! We’re open 8 AM–5 PM. Call us back or reply to book a visit.”
- That’s transactional, tied to their inbound contact, and covered by PBR.
Scenario with real legal exposure:
- Same inbound call. Your system sends that first text, then enrolls them in a 5-message drip: Day 2 sends a seasonal promotion, Day 7 offers a coupon, Day 14 pitches your service plan.
- The first text: probably fine. The drip sequence: requires express written consent you likely don’t have.
Medical and legal practices face additional risk. If you’re a dental office, med spa, or law firm, texts about appointments or legal matters can also create confidentiality exposure on top of TCPA exposure. Dental and med spa practices should review how their follow-up systems handle protected health information — see HIPAA Compliance and AI Phone Receptionists: What Dental Offices and Med Spas Must Know for how those obligations stack up. Law firms have a different concern: initial-contact confidentiality — Law Firm Intake Confidentiality and AI Receptionists: Attorney-Client Privilege on the First Call covers what intake automation can and can’t do.
A Practical Compliance Checklist Before You Automate Follow-Up
This is not legal advice. If you are running a multi-location operation with hundreds of inbound leads per month, talk to counsel. But for most local service businesses, these are the right questions to answer before turning on automated follow-up:
For transactional texts (confirming, completing, following up on the caller’s request):
- [ ] Does the text connect directly to the reason they called?
- [ ] Is there no promotional content — no offers, no upsells, no links to pricing?
- [ ] Did they provide the number voluntarily as part of contacting you?
- [ ] Do you have a record of when and how you got the number?
If yes to all four: you’re in reasonable shape for the call-back or appointment-confirmation text.
For marketing texts (promotions, seasonal offers, drip sequences):
- [ ] Do you have documented opt-in consent specifically for marketing messages?
- [ ] Does the consent disclose automated texts by name?
- [ ] Is the consent uncoupled from any service purchase or quote requirement?
- [ ] Are you honoring opt-outs within 10 business days?
- [ ] Can you pull a timestamped record of each person’s consent?
If any answer is no: do not send marketing texts to that contact until you have the documentation.
The Obvious Objection: “No One Sues Small Contractors”
Some do, and the economics are difficult for defendants regardless of business size.
TCPA class actions are filed regularly against small and mid-sized businesses. Plaintiffs’ attorneys work on contingency. A business that can demonstrate it sent 200 automated marketing texts without written consent is facing $100,000 to $300,000 in statutory damages before any attorney fees. Courts have discretion to triple damages for willful violations.
The practical floor for settling a TCPA demand letter is usually $5,000 to $20,000 for a small business, even when the underlying violation feels minor. The defense costs to fight it exceed that.
The more relevant question is not whether you are a target. It is whether your systems are built so that the answer is obvious and documented when someone asks.
What to Do Before You Turn on Automated Follow-Up
Three concrete steps:
First, audit what your current system actually sends. If you are using a CRM, AI receptionist, or marketing automation tool, map every automated message — who triggers it, what it says, and what category it falls into (transactional vs. marketing). Most businesses discover they have a mix, and only the transactional messages are clean.
Second, build consent collection into the contact points that matter. Your website quote form, your intake form, your booking page — add a checkbox with compliant language for marketing texts. Keep it optional. Store the record.
Third, configure your missed-call follow-up to stay transactional. One text, tied to their inbound call, with your phone number and hours. No drip. No offer. No sequence. If you want to market to them after that first contact, earn the opt-in separately.
If you’re evaluating an AI receptionist or follow-up platform, ask the vendor directly: what controls exist on automated outbound sequences, and what consent documentation do they maintain? Systems that handle medical practices should also answer the BAA question — Does Your Answering Service Need a HIPAA Business Associate Agreement? walks through when a signed BAA is required and how it relates to your follow-up data flows.
FLUXATH’s AI Voice Receptionist is built around capturing and responding to inbound calls — answering them so the missed-call problem doesn’t occur in the first place. If you want to see how that works before investing in a separate follow-up system, you can call the demo line at +1 (858) 358-7270 or book a walkthrough at book.fluxath.com.
The TCPA is manageable. It rewards businesses that keep documentation clean and stay honest about the difference between following up on a caller’s request and marketing to a contact list. Get that distinction right, and your automated follow-up system is an asset rather than a liability.