Clinic App Builder

Patient Intake Forms: What to Ask and How to Go Digital (2026)

What a clinic intake form should and shouldn’t ask, how to design it so patients finish it, and a step-by-step plan for moving from clipboards to digital forms within the privacy and accessibility rules.

Floot ·

Key Takeaways

  • Ask only what someone will use. HIPAA’s minimum necessary standard and plain respect for patients’ time point the same way: every question should have an owner who reads the answer.
  • Send the form before the visit. A link sent at booking, with a reminder, lets patients look up medications and insurance details at home instead of guessing at the desk.
  • Electronic signatures are valid. The federal ESIGN Act says a signature or record can’t be denied legal effect solely because it is electronic. Keep a record of who signed what, and when.
  • Accessibility deadlines are coming. HHS’s Section 504 rule requires WCAG 2.1 AA for web content of recipients of HHS financial assistance, now due May 11, 2027 for those with 15 or more employees and May 10, 2028 for smaller ones.
  • The form vendor needs a BAA. If you’re a HIPAA covered entity, a forms tool that stores patient answers is a business associate. Sign the agreement before collecting real data.

Quick-Start Prioritization Framework

Form sectionRequired for most clinics?Who uses it
Identity and contact detailsYesFront desk, billing
Insurance or payment detailsYesBilling
Communication preferencesYesFront desk, reminders
Health history, medications, allergiesYes (scope varies by discipline)Practitioner
Discipline-specific questionnaire or outcome measureRecommendedPractitioner
Consents, policies and privacy notice acknowledgmentYesFront desk, compliance

An intake form is the first piece of clinical work a patient does for you, and in many small clinics it is still a photocopied clipboard handed over at the desk. The result is familiar: half-finished pages, illegible medication lists, the same questions asked twice, and a practitioner reading the form for the first time while the patient waits. Moving intake online fixes much of that, but only if the form itself is good. This guide covers what to ask (and what to leave out), how to design a form patients actually complete, the rules that apply to consents, privacy notices and accessibility, and a practical plan for going digital. It is written for physio, therapy, dental, specialist and wellness clinics; adjust the clinical sections to your discipline. Regulatory points are general information, not legal advice.

What intake is for

Intake has three jobs: identify and contact the patient, get paid, and give the practitioner a head start. Each section of the form should serve one of those. If a question serves none of them, cut it.

Keep booking and intake separate. Booking should collect the minimum to hold a slot: name, contact details and a neutral appointment type. Clinical questions belong in intake, sent after booking, where the answers go to the clinical record rather than the calendar.

What to ask

A good default structure, from easiest to most personal, so patients build momentum before the harder questions.

Identity and contact

Legal name, preferred name, date of birth, address, mobile number and email. Add the pronouns the patient uses as an optional field if your clinic uses them. Include an emergency contact with their relationship to the patient.

Communication preferences

How the patient wants reminders (text, email, phone) and whether you may leave voicemails or messages with family. For HIPAA covered clinics, 45 CFR 164.522(b) requires you to accommodate reasonable requests to communicate by alternative means or at alternative locations without asking why, so capture these preferences up front and make your reminder system follow them.

Insurance or payment

Insurer, member ID, group number, policyholder name and date of birth if different, plus photos of the front and back of the card. For physio and therapy, ask whether the patient has had other visits this year that count toward a visit limit. For self-pay patients, record that they are self-pay: under the No Surprises Act they are entitled to a good faith estimate, which CMS says is due within 1 to 3 business days depending on how far ahead the visit is scheduled.

Health history

Current medications with dose, allergies and reactions, relevant conditions, past surgeries, and the primary care provider or referring practitioner. Use checklists for common conditions with an “other” field, rather than one large free-text box.

Discipline-specific questions

This is where clinics differ most. A physio clinic asks about the injury, how it happened, what makes it worse and which activities are limited, often with a validated outcome questionnaire for the body region. A dental practice asks about previous dental work, anxiety, bleeding problems and reactions to local anaesthetic. A therapy practice asks what brings the client in and their goals, and usually leaves detailed risk assessment to the clinician in session. Ask your practitioners which questions they actually read before the first visit and start from that list.

Consents and policies

Consent to treatment, your financial and cancellation policy, consent to telehealth if you offer it, photo or recording consent where relevant, and acknowledgment of your Notice of Privacy Practices. Under 45 CFR 164.520, a HIPAA covered direct treatment provider must provide the notice no later than the first service and make a good-faith effort to obtain written acknowledgment of receipt.

What to leave out

Long forms get abandoned or filled in carelessly. Cutting is as important as adding.

Questions nobody reads

Old forms accumulate questions added for one practitioner years ago. Audit every question: who reads it, and what do they do differently because of the answer?

Data you don’t need

Don’t collect a Social Security number unless a specific payer or process requires it. HIPAA’s minimum necessary standard in 45 CFR 164.514(d) applies to how you use and disclose PHI; collecting less in the first place makes it easier to meet and limits the damage if a breach happens.

Duplicate questions

Returning patients shouldn’t retype their history. A digital form can show what’s on file and ask “Has anything changed?”

Designing a form patients finish

Most patients will fill in your form on a phone, often in a hurry. Design for that.

Short, conditional, saveable

Use conditional logic so a patient who answers “no” to surgery never sees the surgery questions. Group questions into short pages with a progress indicator. Let patients save and return, since they may need to find a medication box or insurance card.

Plain language

Write “Do you take blood thinners (for example warfarin or apixaban)?” rather than “Anticoagulant therapy Y/N”. Explain why sensitive questions are asked. Offer the form in the languages your patients speak.

Accessible by design

Labels on every field, clear error messages, usable with a keyboard and screen reader, readable contrast. HHS’s Section 504 rule sets WCAG 2.1 Level AA as the standard for web content and mobile apps of recipients of HHS federal financial assistance. In May 2026 HHS extended the compliance dates to May 11, 2027 for recipients with 15 or more employees and May 10, 2028 for smaller ones. Ask your counsel whether your clinic counts as a recipient; either way, an accessible form is one more patients can complete.

Going digital: a step-by-step plan

Most clinics can move intake online in a few weeks. The steps below keep the risk low.

1. Inventory and rewrite

Collect every paper form in use. Rewrite them into one structured list of questions, removing duplicates and anything nobody reads. Get each practitioner to sign off on their clinical section.

2. Choose the tool

Most practice management systems include intake forms that write straight into the patient record; Jane, for example, lists intake forms among its core features. That is usually better than a separate forms product, because answers don’t need retyping. If you use a standalone tool, it must sign a business associate agreement if you’re a HIPAA covered entity, and it should export answers in a format your records system can take.

3. Handle signatures properly

Under the federal ESIGN Act, a signature, contract or record can’t be denied legal effect solely because it is electronic. State law and specific consent rules can add requirements, so keep an audit trail of who signed, what version they signed and when. Store the signed version, not just the answers.

4. Send at booking, remind before the visit

Send the form link in the booking confirmation and include it in the first reminder. Check the day before which new patients haven’t finished and send one more nudge.

5. Keep a fallback

Some patients won’t or can’t complete forms online. A tablet at the desk running the same form, with staff help available, keeps everything in one system.

6. Make sure someone reads it

Decide who reviews completed forms and when: the practitioner before the first visit, the front desk for insurance details the day before. Flag urgent answers, such as a new allergy, so they aren’t missed.

Privacy and security for digital intake

Intake answers are some of the most sensitive data a clinic holds. Treat the form like the chart.

Don’t email forms back and forth

Fillable PDFs emailed to the clinic land in an inbox, get forwarded and are hard to delete. Use a secure form that stores answers in a system you control.

Limit who sees what

Front desk staff need contact and insurance sections; practitioners need clinical sections. Use the roles your system provides.

Watch the tracking scripts

Analytics or advertising pixels on an intake page can send information about patients to third parties. Keep intake pages free of marketing trackers.

Common mistakes

These are the patterns that make digital intake disappoint.

Digitizing the old form unchanged

A twelve-page paper form becomes a twelve-page online form that patients abandon. Rewrite before you rebuild.

Clinical questions on the booking page

Reasons for visit and symptoms don’t belong in the calendar. Keep them in intake, which goes to the clinical record.

No BAA with the forms vendor

General form builders on standard plans often don’t sign one. Check before you collect real patient answers.

Answers that never reach the chart

If staff print the answers and retype them, you’ve added work. Choose a tool that writes into the record or exports cleanly.

Ignoring patients who need help

Older patients, patients with disabilities and patients with limited English may need a different route. Offer one without making it a burden.

Frequently Asked Questions

What should be on a new patient intake form?

Identity and contact details, communication preferences, insurance or payment information, health history with medications and allergies, discipline-specific questions, and consents including acknowledgment of your Notice of Privacy Practices.

Are electronic signatures on intake forms legally valid?

Generally yes. The federal ESIGN Act says a signature or record can’t be denied legal effect solely because it is electronic. Keep an audit trail and check any state-specific consent requirements with counsel.

Do digital intake forms need to be HIPAA compliant?

If your clinic is a HIPAA covered entity, the forms tool stores PHI and is a business associate, so it needs a signed business associate agreement and appropriate safeguards.

How long should an intake form be?

As short as it can be while giving the practitioner what they need before the first visit. Conditional logic keeps the version each patient sees much shorter than the full form.

Do intake forms have to be accessible?

For recipients of HHS federal financial assistance, the Section 504 rule requires WCAG 2.1 Level AA, with compliance dates of May 11, 2027 (15 or more employees) and May 10, 2028 (fewer). Accessible forms are good practice for every clinic.

Can we build our own intake app?

If you’d rather not use your practice software’s forms, an AI app builder such as Floot can build a form app. Floot doesn’t offer a business associate agreement, so it isn’t suitable for collecting health history from patients of a HIPAA covered clinic; use it for non-PHI forms such as class sign-ups or staff onboarding.

Sources