A social media policy with patients is no longer an optional ethical luxury for a psychology practice in 2026: it is the concrete tool that prevents a follow request, a late-night DM or a revealing comment on your post from turning into a dual relationship, a confidentiality breach or, at worst, a formal complaint to your professional college. The more visible the licensed health psychologist is on Instagram, TikTok or LinkedIn, the more necessary it is to decide before — not after — what gets accepted and what doesn't.
This guide collects the social media policy with patients that works in real practices: the ethical framework, the concrete decisions for Instagram, TikTok and LinkedIn, the written template handed out with the informed consent and the delicate cases that nearly always end in a college complaint when nobody thought about them in advance. If your content strategy comes from the guide on Instagram for psychologists or from TikTok for psychologists, this is the piece that closes the loop between acquisition and clinical frame.
Why you need a written social media policy
Three reasons that compound as your digital presence grows:
- Protection of the therapeutic frame: social media is a non-clinical parallel channel. Without a policy, every digital interaction with a patient erodes the symbolic space that holds therapy.
- Public confidentiality: one like, follow or comment of yours can reveal the therapeutic relationship to third parties looking at the patient's network. The policy prevents involuntary disclosures.
- Professional defence: in a forensic evaluation or college complaint, the first thing reviewed is your digital interactions with the patient. A prior policy signed alongside informed consent is your best proof of good practice.
The Spanish General Council of Psychology's professional code does not mention social media by name, but articles on confidentiality, dual relationships and respect for patient dignity apply directly. APA and BPS have published specific guidelines since 2019.
Three patient types on social media (and how they behave)
Have a clear mental map before making case-by-case decisions:
- The patient who already followed you: discovered you through educational content and then booked. They live normally following your professional profile and don't expect reciprocity.
- The patient who discovers you mid-process: starts therapy in person and a few weeks in searches for you on social. Most difficult situations arise here because curiosity about you is part of the transference process.
- The patient who asks for follow-back or messages by DM: the most delicate line. This is where an improvised reply can break the frame or, worse, create paratherapeutic dependence outside session.
Your policy must give a clear, predictable and professional answer to all three before they appear.
Accepting follows: ethical framework
The practical rule most regional psychology colleges support is professional asymmetry: your professional profile can be followed by anyone (including a patient) without compromising ethics, but you do not follow back. That asymmetry preserves the therapeutic frame and the patient's privacy.
Three valid configurations:
- Public professional account only: cleanest option. Patients follow you freely, you never follow back. Your private life is absent.
- Public professional + private personal account: valid if the personal account is closed to a non-clinical circle and you actively decline patient requests there.
- Open personal account only: not recommended. It mixes private and professional life and multiplies risk.
Direct messages (DMs) and privacy
DMs are where most professionals slip. Four rules that work:
- Do not do therapy by DM, not even one-off advice. Every clinical reply outside session erodes the frame.
- One single neutral, professional reply: thank, redirect to session and close. If they insist, a second brief reply restating the frame.
- Never use DMs for appointment confirmation or payments: use professional WhatsApp or email reminders integrated with your online calendar, not your Instagram inbox.
- Keep relevant interaction logs in the patient's clinical history. If a forensic evaluation comes up, the timeline must be there.
If you detect real urgency via DM (suicidal risk, acute episode, imminent violence), the response is always the same: redirect to emergency lines (112 in Spain, 988 in the US) and offer an urgent slot in your calendar.
When a patient comments on your post
A patient commenting "this describes me" on your post about anxiety symptoms has involuntarily revealed part of their clinical picture to anyone reading their profile. The correct handling has three steps:
- Do not reply in the feed. Your public silence is protection.
- Hide the comment if it reveals identifiable clinical data (without deleting or reporting): the patient sees their comment as published, the rest of the world does not.
- Address it in the next session: explain respectfully why you hid it, what the policy says and how to participate safely in your content (safe lines: "like", share with no personal caption).
This handling also applies to likes on posts where the patient discloses condition (if you "like" a comment "finally someone who understands ADHD", you are publicly validating an attribution). Rule of thumb: do not like comments that identify clinical condition from your professional account.
Looking up a patient on social media: can you?
The temptation is high, especially with patients who share little in session. The widely accepted rule by professional colleges is do not search the patient unless there is serious risk to their life or others'. Reasons:
- You invade their privacy without informed consent.
- You bias your clinical formulation with decontextualised information.
- You create an information asymmetry the patient did not authorise.
- If they find out, it breaks the therapeutic alliance.
Three scenarios may justify reciprocal search: (1) suicidal risk with a missing patient, (2) forensic case where the evaluation context allows it, and (3) minor with suspected bullying or digital exposure. In all three, document in the clinical history what you searched, why and what you found.
Written-policy template handed out with informed consent
1) Professional accounts: my profile on [Instagram / TikTok / LinkedIn] is open to the public. You can follow me normally. I do not follow patients back, to protect the therapeutic frame.
2) Personal account: my personal profile is closed. I do not accept follow requests from active patients nor for 12 months after discharge.
3) Direct messages (DM): I do not do therapy by DM. To contact me between sessions, write to [professional email] or call [phone]. For emergencies, 112 (Spain) / 988 (US).
4) Comments and likes: if you comment on my posts, I may hide your comment when it reveals clinical information of yours, to protect your confidentiality. We will discuss it in session.
5) Reciprocal search: barring serious risk to your safety, I will not look up your profile on social media. If I need information about something specific, I will ask you directly.
Signed: I agree with [Psychologist's] social media policy.
One page, five points, read in session. Patients knowing exactly what to expect removes most conflicts before they appear. This policy is best attached as an annex to the patient's informed consent and signed alongside the therapy contract.
How to communicate the policy in session 1
The best moment to present it is during the framing phase, in the last 10 minutes of the first session, right before closing. Three keys:
- Non-defensive tone: "Let me tell you how I work on social so you know what to expect". It is not a prohibition, it is clarity.
- Explain the why: the patient's confidentiality, not the psychologist's protection, is the main argument.
- Leave room for questions: many patients have never thought about it and appreciate the framing.
If you make it a natural part of the therapeutic frame and patient contract, it stops being awkward and becomes one more professional act, like discussing fees or cancellations.
Delicate cases: minor, abuse victim, public figure
- Minors: the policy is signed by parents or guardians. You do not follow the minor, do not accept their follow, not even from the professional account if they live in a small family unit where they could be identified. Even more caution in child-adolescent work.
- Abuse victim: proactive exposure blocking. Make sure your professional account does not expose their location, session time or patterns an aggressor might infer. Consider not publishing content on the day of their session.
- Public or social-media-known patient (local celebrity, influencer, politician): choose never to follow them from either account. Any visible interaction will be read as leakage of the therapeutic relationship.
- Active forensic case: zero digital interaction, not even DM replies. Everything goes through formal documented channels.
Mistakes that have triggered college complaints
- Liking a patient's public post: reveals the therapeutic relationship to their network.
- Sharing in stories a "no-names" session with unique identifying details: if the patient identifies themselves, confidentiality is breached.
- Accepting a patient on LinkedIn during active therapy: recorded as a publicly visible professional contact.
- Replying with clinical advice by DM: any subsequent harm can be attributed to intervention outside session.
- Blocking the patient without prior notice: even if you have reasons, unilateral blocking without addressing it in session is a therapeutic alliance rupture.
- Stalking the former patient months after discharge: ethics doesn't end at discharge. The APA recommends at least 2 years of "no dual relationship" after closure.
- Publishing identifiable testimonials with photo, even with verbal consent. Only written and revocable.
Frequently asked questions
We answer the most common questions on social media policy with patients in psychology and digital ethics in practices in Spain and the EU.
Can I accept a patient's follow request on Instagram?
The safest ethical practice is not to accept the follow on your personal account and redirect the patient to your public professional account. Accepting follows on the personal account creates a dual relationship that blurs the therapeutic frame, exposes your private life and can be used in a forensic context. If you only run a public professional account, the patient can follow it without asking, like any other user, and that is fully compatible with ethics.
A patient sent me a DM telling me how they feel — what do I do?
Reply once, briefly and professionally, redirecting to a session: "Thanks for writing. To address this properly, let's discuss it in our next session, or book an urgent appointment if needed." Never do therapy by DM, not even one-off advice: it breaks the frame, isn't recorded in the clinical history and creates a parallel channel that in a forensic case reads as malpractice. If the urgency is real, redirect to emergency lines (112 in Spain, 988 in the US).
Is it ethical to look up a patient on social media before a session?
Outside serious risk to the patient's life (imminent suicide suspicion, missing person), reciprocal search is ethically questionable: it invades privacy, biases your clinical formulation and can be used against you if the patient finds out. If you need information for the case, ask directly in session. If a search was warranted by clinical urgency, document the justification in the clinical history.
Do I need a written social media policy in my practice?
It is not a legal obligation in Spain, but it is a strongly recommended ethical practice by most psychology colleges. A written policy, handed out in the first session alongside informed consent, protects the patient (they know what to expect) and the clinician (it prevents ambiguity in case of a college complaint or forensic evaluation). One page, five sections, read in session. As an additional reference, the Spanish Data Protection Agency publishes guidance on personal data on social networks that also applies.
What if a patient comments on my posts in a revealing way?
Hide the comment if it reveals clinical data or identifies the patient, without deleting or replying publicly. Then, in the next session, address it from the therapeutic frame: explain that you hid the comment to protect their privacy and review the policy. Don't reply in the feed, don't like sensitive comments and don't start public threads on clinical topics. Your public silence protects their confidentiality.
Can I have separate personal and professional profiles?
Yes, and it is the most recommended practice. The professional profile is public, educational and under your professional name; that's where you publish psychoeducation and patients can follow you freely. The personal profile stays private with your non-clinical circle and you decline follows from patients. If they find you and request to follow, redirect them politely to the professional one without making them feel rejected.
A patient sent me a LinkedIn invitation — what do I do?
LinkedIn is the trickiest because it mixes professional and contact graph. Practical rule: if the therapeutic relationship is active, do not accept (it creates a visible dual relationship). If more than 2 years have passed since discharge and the request comes from a genuine professional interest (same field, collaboration), you can weigh it case by case documenting the decision. For active clinicians, the cleanest line is not to accept patients on LinkedIn.