SMS Compliance for Service Businesses: TCPA, Consent, STOP, and Quiet Hours (2026)

Part of the series Text messaging & 10DLC for service businesses

Most owner-operators start texting customers from their own phone and never think about the law. That’s mostly fine while you’re texting one client at a time about their appointment. It stops being fine the moment you send the same promotion to your whole list, automate reminders through software, or hire someone else to do the texting. This guide covers what changes, what the rules actually require, and how to stay on the right side of them without a compliance department. It’s part of our series on text messaging for service businesses.

The three rulebooks you’re actually following

• The TCPA (federal law). The Telephone Consumer Protection Act covers calls and texts. It lets consumers sue directly, with statutory damages of $500 per message — up to $1,500 if the violation was willful. A single campaign to 200 people can turn into a six-figure claim, which is why there’s an entire industry of plaintiffs’ firms built around it.
• State “mini-TCPA” laws. Several states — Florida, Oklahoma, and Maryland among them — have their own texting laws, some stricter than the federal one on consent, quiet hours, or how often you can contact someone. The rule of thumb: the customer’s state is the one that matters, not yours.
• Carrier rules. Wireless carriers and the industry group CTIA set their own requirements for business texting. Breaking them doesn’t get you sued; it gets your messages filtered or your number shut off — which, for a business that runs on texts, can be worse.

Rule 1: Get the right kind of consent

Consent comes in two strengths, and which one you need depends on what you’re sending (see transactional vs. marketing texts):

• Service texts — on-the-way alerts, visit-complete notices, schedule changes, invoices, replies to the customer’s questions. When a customer gives you their mobile number to book service, that’s generally treated as consent to texts about that service. Saying so plainly on your booking form removes any doubt.
• Marketing texts — discounts, seasonal promotions, referral offers, “we miss you” win-backs, upsells. These need prior express written consent: the customer affirmatively agrees, in writing (a checkbox on a web form counts), to receive marketing texts from your business at that number. The agreement can’t be a condition of buying service, and it should say that message frequency varies and message and data rates may apply.

The mistakes that get businesses in trouble are almost always about marketing consent: a pre-checked box, consent buried in terms of service, a single checkbox that bundles “text me about my appointment” with “send me promotions,” or a list someone bought, borrowed, or imported from an old system with no record of how anyone opted in.

Rule 2: Identify yourself in every message

Every text should make it obvious who it’s from — your business name, not your first name or your technician’s. Carriers check for this, and customers who don’t recognize a sender are the ones who report messages as spam. “Hi, it’s Jess” from an unknown number is how a legitimate reminder ends up flagged.

Rule 3: Make opting out easy — and honor it everywhere

• Tell people how to stop. Automated and marketing messages should include something like “Reply STOP to opt out.” You don’t need it on every one-to-one reply in a live conversation, but you do need it on anything automated or sent in bulk.
• Respect any reasonable opt-out. STOP, UNSUBSCRIBE, CANCEL, END, and QUIT are the standard keywords — but under current FCC rules a customer can also revoke consent in plain language (“please stop texting me”) or by another reasonable method, and you’re expected to honor it promptly. FCC rules set an outer limit of 10 business days; the safe practice is immediately.
• Opt-out means opt-out. If someone texts STOP, every system that can text them has to know — your software, your techs’ phones, your marketing tool. A one-time confirmation that they’ve been unsubscribed is fine; anything else isn’t.
• Answer HELP. A customer who texts HELP should get your business name and how to reach you. It’s a carrier requirement and a small trust signal.

Rule 4: Respect quiet hours

Federal rules prohibit telemarketing contact before 8am or after 9pm in the recipient’s local time. Some states go further — Florida’s law, for example, moves the evening cutoff to 8pm for marketing contact. Service texts about something the customer booked are a different category (an on-the-way text at 7:45am for a 7:50am appointment is not a promotion), but a good rule is: nothing promotional goes out early in the morning, late at night, or in the middle of a holiday dinner.

Rule 5: Keep proof

If a customer ever claims they never agreed to your texts, the burden is effectively on you to show they did. For each customer, you want to be able to show when they consented, how (which form, which checkbox), and what the consent language said at the time. Also keep a record of every opt-out. Screenshots of an old version of your website are a weak defense; a timestamped record saved at the moment of consent is a strong one.

Rule 6: Mind the content

• Avoid link shorteners like bit.ly in business texts — carriers treat shared shorteners as a spam signal. Use your own domain.
• Don’t send sensitive information: lockbox codes, alarm codes, garage codes, full card numbers. Texts sit unencrypted on phones that get lost, shared, and backed up.
• Carriers restrict some content categories outright (cannabis, firearms, and similar). A local service business rarely runs into these, but it’s worth knowing they exist.
• Don’t text more often than you said you would. If your sign-up form says “a few promotions a month,” don’t send twelve.

Rule 7: Register how you send

Separate from the law, carriers now require businesses texting from software to register their brand and use case — 10DLC registration for regular local numbers, verification for toll-free numbers. Unregistered traffic gets blocked. That process has its own guide: 10DLC and toll-free registration explained.

A compliance checklist you can actually use

• Your booking or quote form says customers will get texts about their service, and how to opt out.
• Marketing consent is a separate, unchecked, optional box with its own clear language.
• You store when and how each customer consented and the exact wording they saw.
• Every automated or bulk message names your business and says how to opt out.
• STOP is honored immediately across every way your business texts; HELP gets a real answer.
• Promotions only go to people who opted in to marketing, and only between 8am and 9pm (earlier cutoff in stricter states).
• No access codes or payment details in texts.
• Your texting number is registered or verified with carriers.
• You have a public privacy policy and SMS terms that explain what you send and how to stop.

How ReachOutReady covers the checklist

• Your quote form shows an SMS disclosure about service texts. Marketing consent is a separate, optional checkbox, and we save the moment it was given along with the exact wording the customer agreed to.
• STOP and START replies are processed automatically. A customer who opts out stops receiving automated texts, campaign texts, and manual texts from the office — the system blocks the send. HELP gets an automatic reply with your business name and contact details.
• Automated customer texts name your business and include opt-out instructions; campaign texts get your business name and “Reply STOP to opt out” added automatically if you leave them off.
• Campaigns only reach customers who gave marketing consent and haven’t opted out, and the send button is blocked between 9pm and 8am in your business’s time zone.
• Techs text clients through your business number instead of their personal phones, so every conversation is logged and every opt-out applies to them too.
• Every business gets hosted SMS privacy policy and SMS terms pages to link from your site and use during carrier registration.