TCPA compliance for service businesses that text customers: the plain-English version

By the RetainCall Team · August 2026

Texting customers works. Everyone in the trades figures this out eventually — a two-line text gets answered when three voicemails don't, and the appointment gets confirmed instead of no-showed. So shops start texting. Then somebody at a trade association mixer says the words "TCPA" and "fifteen hundred dollars a message," and the owner does one of two things: panics and stops texting entirely, or decides it's lawyer noise and ignores it.

Both reactions cost money. The first throws away the best communication channel you have. The second leaves a real, uncapped liability in your business — one that gets expensive fast, because the damages are per message and you send messages in batches.

The actual rules aren't that complicated for a service business. One distinction does about 80% of the work, and the rest is bookkeeping.

This is general information written by operators, not legal advice, and it's no substitute for an attorney who knows your state. Use it to ask better questions when you talk to one.

What TCPA is, in one paragraph

The Telephone Consumer Protection Act is a 1991 federal law about unwanted calls and, by extension, texts — courts have long treated a text message as a "call" under the statute. It's enforced two ways. The Federal Communications Commission can act against you, which is rare for a small contractor. And private individuals can sue you directly, which is not rare at all, because the law sets statutory damages: $500 per violating message, tripled to $1,500 if the violation was willful or knowing. No one has to prove they were harmed. The message either was permitted or it wasn't.

That structure is why a list is a multiplier, and why this matters to a five-truck shop as much as to a national brand. One bad text is a nuisance; the same bad text sent to 900 numbers is a case worth filing.

The distinction that does 80% of the work

Here's the thing most owners get wrong: they think TCPA is about technology — whether you use an autodialer, whether it's a "mass texting platform," whether you typed it yourself. That's mostly backwards. A 2021 Supreme Court ruling substantially narrowed what counts as an "autodialer" under the statute, and a lot of ordinary business texting tools fall outside that narrow definition now.

What the rules actually turn on is the purpose of the message — and how strong your consent needs to be depends on which bucket the message falls into. Sort every text your business sends into one of three:

Bucket 1 — You're replying to someone who contacted you

A customer calls and doesn't reach anybody. A customer texts your business line. A customer fills out the "request service" form on your site. You reply about that request.

This is the safest ground in the framework. They initiated contact, gave you their number for that purpose, and your reply is about the thing they asked about. Keep it on-topic — their question, the address, a slot — and you're in the strongest posture available.

Bucket 2 — Transactional and service messages to an existing customer

"Tech is 20 minutes out." "Confirming Thursday 9–11am." "Your invoice is ready." "Part came in, want to schedule?"

These generally need what the rules call prior express consent — a lower bar, usually satisfied when the customer voluntarily gave you their mobile number in connection with the work. The catch is that this consent covers messages about the transaction. Bolting a promotion onto the end of an appointment reminder is the classic way a Bucket 2 message quietly becomes a Bucket 3 message.

Bucket 3 — Marketing and promotion

"Spring tune-up special, $89." "Refer a friend, get $50." "We're offering financing now."

This is the bucket with teeth. Marketing texts require prior express written consent: a clear, affirmative agreement from that person to receive marketing texts from your specific business, disclosing that messages may be automated and that agreeing isn't a condition of buying anything. A checkbox they actively check, a signed form, a documented text-in keyword. Not a pre-checked box. Not "we had their number from a job in 2023."

If you remember nothing else: the number you already have gets you to Bucket 2. It does not get you to Bucket 3. Marketing needs its own separate, documented yes.

The math on getting it wrong

Owners under-react because the damages sound abstract. They aren't. Run it the way you'd run any other risk in the business.

Say you've been in business a while and you've accumulated 2,000 mobile numbers in your invoicing system. You send a spring promo blast to all of them. You never collected marketing consent — you just had the numbers from doing the work.

The line that should get your attention is the defense cost. These cases mostly settle, and they settle for more than the promo was ever going to earn — a $89 tune-up blast to 2,000 people might book 30 jobs, or $2,670, standing against five figures of downside.

Bucket 1 and Bucket 2 messages, done properly, carry a fraction of that risk while doing most of the actual work of running a service business. Which is the good news buried in all of this: the texting that makes you money is the texting that's easiest to do legally.

Seven things to actually fix this week

1. Add a consent line everywhere you capture a number

Your web form, your intake script, your invoice signature line. One sentence, in plain sight, not buried in a terms link. Something like:

"By providing your mobile number you agree we may text you about your service request, including automated messages. Message and data rates may apply. Reply STOP to opt out. Consent isn't a condition of purchase."

If you also want marketing rights, that needs its own separate, unchecked checkbox — not the same sentence.

2. Log the consent, not just the number

When a claim shows up, the number in your system proves nothing. What you need is the record: the phone number, the date and time, where it came from (web form, phone intake, signed invoice), the exact wording the person saw or heard, and for web forms the IP address. The limitations period on these claims runs four years — keep the records at least five.

3. Make opt-outs work everywhere at once

This is where small shops fail most often. A customer replies STOP to your dispatch tool, which suppresses them — but the marketing list lives in a different system and never got the message, so they get the spring promo three weeks later, now with documented proof they'd opted out. That fact pattern is what turns a nuisance into "willful."

You also have to honor a revocation made in any reasonable manner — not just the magic word STOP. "Quit texting me," a word to your tech in the driveway, an email to support: all count. Practically: keep one master do-not-text list, and make it a standing rule that anyone who touches a customer conversation writes opt-outs to that list the same day.

4. Respect quiet hours in the customer's time zone

Telemarketing calls and texts are restricted to 8am–9pm in the recipient's local time, not yours. Send a promo at 6:30pm Pacific and someone with a New Jersey area code gets it at 9:30pm. No promotional blast should go out without a time-zone check.

5. Don't text numbers you bought

Purchased lists and shared lead-gen leads are the riskiest thing a contractor can do with a phone. Consent given to one company generally doesn't transfer to you, and "the vendor said they had consent" is not a defense you want to build a business on. If you buy leads, earn the text consent directly on first contact.

6. Check your state's version

Several states have passed their own mini-TCPA statutes that are stricter than the federal rules — tighter consent requirements, narrower calling windows, and their own private right of action. Florida, Oklahoma, Washington, and Maryland are the ones that come up most. If you service a metro that straddles a state line, you're subject to both sets.

7. Separate the "may we" from the "can we"

Carrier registration for business texting — the 10DLC process, campaign approval, brand vetting — is not TCPA. That's carriers deciding whether your messages get delivered at all. Passing it doesn't make you compliant; being compliant doesn't get you registered. You need both.

A five-minute audit you can run today

Pull up whatever system sends your texts and answer these:

1. Sort last month's outbound texts into the three buckets. What percentage is Bucket 3?
2. For the Bucket 3 messages, can you produce a consent record for any specific recipient — the wording, the date, the source? If not, stop sending Bucket 3 until you can.
3. How many separate places can a text go out from — dispatch, invoicing, marketing, someone's personal cell? Each one is an opt-out leak.
4. If a customer replied "stop texting me" to your main line right now, would anything happen? Who would see it?
5. Does your website form say anything about texting at all?

Most shops we've talked to find the same two things: their marketing consent is nonexistent, and their opt-out handling depends entirely on one person remembering. Both are fixable in an afternoon.

Where software actually helps

Nothing above requires buying anything. Rewrite the form line, start a do-not-text list, keep the consent record in a spreadsheet if you must. That closes most of the exposure. What software helps with is the part that depends on a human remembering under pressure — logging every consent, catching an opt-out phrased as a sentence instead of a keyword.

That's the shape of what RetainCall does. Every text it sends is a reply to someone who just called you — Bucket 1, the strongest posture there is — with the consent disclosure in the first message, opt-out language on every thread, and STOP-and-variants handling built in rather than bolted on. It answers the calls you miss, holds the conversation by text, and books the job. Flat $199/month, unlimited calls, no per-call fees, 7-day free trial with no card.

But the honest summary of this post is simpler than any product: the texts that make you money are the low-risk ones. Reply to people who contacted you. Confirm the appointments you already have. Get a real, written yes before you promote anything. Do those three things and TCPA stops being a reason not to use the best channel you've got.

Related: Why customers won't leave voicemails anymore — why text became the channel that gets answered. And how to set up call forwarding, for the calls before they become a text.

RetainCall was built after watching contractor friends lose four-figure jobs to missed calls week after week — somebody had to just fix it. Questions about any of this? Reach us at support@retaincall.com. More: What answering services actually cost in 2026 · Compare your answering options · Built for HVAC shops