Teletherapy: frame, platforms, and good practices

Teletherapy stopped being the pandemic’s emergency plan and became a permanent modality of practice. The question is no longer whether it works: the APA’s own telepsychology guideline, citing the accumulated evidence (Greenwood et al., 2022, among others), states that appropriately adapted remote interventions are as effective as their in-person counterparts for adults and youth, particularly therapy delivered over videoconferencing and telephone. The questions that remain open are practical ones: how to build a serious therapeutic frame at a distance, what consent you need, what you do when a crisis unfolds two hundred miles away, and what criteria — not brand names — should drive your platform choice. This guide works through each.

The professional standard: the APA 2024 revision

The current reference is the revision of the Guidelines for the Practice of Telepsychology approved by the APA Council of Representatives in August 2024, replacing the 2013 version. It defines telepsychology as the integration of telecommunication technologies with psychological practice, covering both synchronous work — videoconferencing, audio-only telephone — and asynchronous channels such as text, email, and data-tracking apps, alone or combined with in-person care.

One nuance worth having clear before you cite it: the document itself states that guidelines are aspirational, unlike standards, which are mandatory. It is not law anywhere; it is the strongest professional standard available, and that is exactly its practical value. If you ever have to explain how you organized your remote practice, “I followed the current APA guideline” is a very defensible answer.

Two of its eleven guidelines set the tone for everything else. Guideline 1: telepsychology is itself a series of competencies — it is not enough to transplant your office work into a video call; you are expected to train for the modality and keep up with research on what works differently at a distance. Guideline 6: if your patient is in another state or another country, you comply with the rules on both ends — licensure, data protection, consent — and for international practice the guideline recommends contacting the licensure boards or professional associations of both jurisdictions and documenting your consultations when the rules conflict.

The remote frame, in practice

A remote session needs explicit agreements that happen automatically in the office. Three prevent most problems:

Location check at the start of every session. Ask where the patient is and write it down. The APA guideline asks for this twice over: as part of the documentation of each encounter and as a precondition of the emergency plan — if something happens, the services you can activate are the ones where the patient is, not where you are.
A private space, on both sides. Agree from the outset what happens if the patient connects from a car, an office, or a shared home: headphones, who might overhear, when rescheduling is the better call. The commitment is symmetrical — your side of the screen is part of the frame too.
A backup channel. Decide before the first session what happens if the connection drops; the guideline explicitly suggests agreeing to continue by phone. Thirty seconds of prior agreement save fifteen minutes of mutual anxiety.

“Before we start, the two usual questions: where are you connecting from today, and are you somewhere you can speak privately? And remember — if the call drops, I’ll ring your cell and we continue there.”

Emergency planning is not optional

Guideline 9 is the section most worth reading in full. Before services begin, it recommends obtaining and documenting the patient’s geographic location, telephone number, and an emergency contact person; useful additions include who else lives at or shares the location, the nearest medical facility, and the local police. With that, you build a plan for deploying the emergency services available where the patient actually is; share a copy with the patient and file it in the record. When you work with minors, identify a caregiver who will be available during the session. And if a patient declines to provide this information, the guideline asks you to document the refusal and weigh honestly whether you can offer services safely.

Identify the crisis line and emergency numbers that serve your patient’s location before you ever need them — the resources in the plan must be local to the patient, not to your city, and they belong in the chart, not in your memory.

APA Guideline 2 recommends dual consent: one for the psychological services and one for the telepsychology modality itself. Its sixteen consent domains work as an audit of your current form, and the ones most often missing are precisely the remote ones: what data will be stored, how, and who can access it; guidance about the patient’s location of care; emergency procedures; what happens when technology fails; fees and cancellation policy; periodic renewal of consent; and your license and jurisdiction. For children and youth, the guideline calls for the minor’s informed assent alongside parental consent. What the consent document should contain, step by step, is covered in our informed consent guide.

One non-negotiable point: recording a session — audio, video, or transcription, including any AI tool that processes session content — is never a default. It requires express, documented, revocable consent, specific to that purpose, as the same informed consent guide details.

Choosing a platform: criteria, not brands

No “best teletherapy platforms” listicle can substitute for this exercise, because the right platform depends on where you practice and on what your consent form promises. From APA Guideline 3 and general data-protection duties come the questions any vendor — video, messaging, records, AI notes — should be able to answer in writing:

What data does it store, where, and for how long? Guideline 3 asks you to review the vendor’s data-management and retention policies before adopting the tool and periodically afterwards, because terms of service change.
Who can access that data, and what controls are available? Encryption and multi-factor authentication are the safeguards the same guideline explicitly recommends.
If there is a security breach, does the contract oblige the vendor to notify you promptly enough for you to meet the breach-notification duties that apply where you practice?
Can you export and dispose of the data when the relationship ends? Secure data disposal is APA Guideline 4.
Does any feature record or process session content with AI, can you disable it, and under what consent does it operate? The guideline flags automated and AI-facilitated features as deserving special caution.
Does it let you collect express consent with an electronic signature and keep evidence of it?
Is there a written contract, with confidentiality obligations that survive termination?

If a vendor cannot answer these in writing, that is also an answer. And always verify the rules where you practice: a platform that is adequate in one jurisdiction may not satisfy another. If the vendor runs AI on patient data, add the criteria from our guide on whether AI is safe for patient data.

If you practice in the United States: the BAA question

US readers have one more contract to ask about. Under HIPAA, a business associate is a person or entity outside your workforce that performs functions involving access to protected health information, and HHS’s sample business associate agreement provisions describe what the written contract must establish: the permitted uses and disclosures of PHI, safeguards, the duty to report breaches and unauthorized uses to you, and the return or destruction of PHI when the contract ends. So the questions to put to any vendor are: will you sign a BAA, and does it cover everything the tool touches — recordings and transcripts included? Note what this is not: a BAA is a contract, not a certification, and nothing here is a statement about any particular product’s HIPAA status — that is exactly what you verify with the vendor, in writing, for the rules that apply where you practice.

Rules are local: Mexico as an example

Many jurisdictions regulate teletherapy through their general frameworks rather than a dedicated statute, and the gap between what is actually on the books and what blogs claim can be wide. Mexico is a good example. There is no telepsychology-specific technical norm — the only telemedicine norm project was formally cancelled in 2018, on the official reasoning that remote care is integrated into clinical practice and should not be regulated separately. In January 2026, however, the General Health Law gained its first digital-health chapter, which defines telehealth and sets four conditions for telehealth services: trained, designated personnel; secure and reliable systems that guarantee confidentiality and data protection; mechanisms for informed consent at a distance; and adequate documentation of care provided through digital platforms. The chapter is brand new and its implementing rules are still pending. Meanwhile, what unambiguously binds a Mexican private practice is the general framework: the clinical-record norm NOM-004-SSA3-2012, which requires a progress note for every encounter regardless of modality, and the 2025 federal data-protection law, which demands express written consent for health data — electronic signature included — and immediate breach notification to the patient. Wherever you work, the exercise is the same: map your jurisdiction’s general duties onto the remote setting, and verify locally before assuming a gap.

Teletherapy still produces a record

A video session produces exactly the same note as an in-person one — if you document in SOAP, the structure changes not at all, and our SOAP notes guide applies unchanged. What telepsychology adds, per APA Guideline 5, are a few extra fields worth systematizing: the modality and technology used, the patient’s physical location at each encounter, any relevant technical failures during the session, and the safety and support resources local to the patient. None of that is decorative bureaucracy: it is precisely the information you will need the day a session gets complicated.

A serious teletherapy frame produces more documents, not fewer: a modality consent, an emergency plan, notes that carry location and local resources. gesell.ai helps keep that chart in one place: informed consents can be signed digitally and archived in each patient’s chart, the chart itself stays structured — intake, clinical history, treatment plan, session notes — and your session record becomes a draft SOAP, DAP, BIRP, or GIRP note that you review, adjust, and approve. The session can be remote; the record remains yours, and complete.