Welcome to the forefront of conversational AI as we explore the fascinating world of AI chatbots in our dedicated blog series. Discover the latest advancements, applications, and strategies that propel the evolution of chatbot technology. From enhancing customer interactions to streamlining business processes, these articles delve into the innovative ways artificial intelligence is shaping the landscape of automated conversational agents. Whether you’re a business owner, developer, or simply intrigued by the future of interactive technology, join us on this journey to unravel the transformative power and endless possibilities of AI chatbots.
Subscribe
As AI vendors tighten token and credit caps, staff who turn to free chatbots can expose patient data to vendors with no business associate agreement. Eight steps can keep practices protected.
It's Monday afternoon and the front desk is buried in patient portal messages. The practice's AI assistant has been drafting replies all morning, until it stops: usage limit reached, try again later. Twenty messages are still waiting.
So a staff member opens a free AI chatbot on her phone, pastes in a patient's message with name, symptoms and medication list, and gets a draft in seconds. The patient gets a fast reply. The practice has just disclosed protected health information to a vendor with no business associate agreement.
As practices build AI into daily operations, this scenario is becoming more likely. The interruption slows the team down. The workaround can turn into a
AI tools measure work in tokens, small pieces of text that are often part of a word. Everything counts toward the total: the question, any attached document, the running conversation history and the answer. Business plans include an allowance, whether the vendor calls it tokens, credits or messages.
Those allowances are shrinking relative to demand. Fast Company reported that AI companies are tightening token limits as computing capacity grows scarce and expensive. Vendors, including Microsoft, have moved some AI features to credit-based, usage-based billing with administrator spending limits.
At the same time, users are consuming more. Forbes reported in April that people are exhausting allowances faster than ever as they hand AI longer, multistep tasks and larger documents. In a medical practice, that means summarizing lengthy records, drafting referral letters and working through a full inbox of portal messages.
Depending on the tool and plan, one of three things usually happens.
The third outcome is known as
The financial stakes are significant. IBM's 2025 Cost of a Data Breach Report found that 63% of the breached organizations it studied had no AI governance policy, and that high levels of shadow AI added about $670,000 to the average cost of a breach. Health care remained the costliest industry for breaches in that report, at an average of $7.42 million.
Practice owners and administrators can reduce the risk without giving up the efficiency AI provides.
Patients are paying attention to how practices use AI. Front-desk staff and clinicians should be ready with consistent answers.
If a patient asks whether health information goes into AI tools, the answer should be that only approved tools covered by a business associate agreement are used and that personal or free AI accounts are prohibited. If a patient asks whether AI makes decisions about care, the answer is that AI supports administrative tasks, while clinicians review and make every care decision. And if a patient asks what happens when the system is down, staff should be able to say that every AI-assisted task has a manual backup, so appointments and refills are not delayed.
Every practice that relies on AI will eventually hit a usage limit, often on its busiest day. Whether that moment becomes a privacy incident depends on planning done in advance: approved tools, adequate capacity, a clear written policy and a safe path for staff when the tool says no.
Scott Carr is the owner of
Stay informed with the Medical Economics eNewsletter, delivering expert insights, financial strategies, practice management tips, and technology trends tailored for today’s physicians.
259 Prospect Plains Rd, Bldg H
Cranbury, NJ 08512
© 2026 MJH Life Sciences®
All rights reserved.
