Every pharmacy phone line is a small courtroom that convenes forty times a day without a bailiff. A voice says it's calling about somebody's metformin. Behind the counter sits a technician, usually not the pharmacist, with a label printer chirping at her elbow. She has a few seconds to rule on two questions. Who is this? And what are they allowed to hear?
The docket keeps growing. The caller used to be the patient, or the patient's spouse. Now it might be a home aide standing in a client's kitchen or a daughter three time zones away. It might be a relay operator voicing typed words for a deaf patient, or a contractor working for an insurer. Increasingly, it's a synthetic voice that may or may not admit what it is. Federal privacy law gives the technician less to hold onto than most people assume. Research on human hearing gives her less still.
To think it through, we called Constance "Connie" Callback. She has spent twenty-two years as a technician at an independent drugstore in a town with one stoplight and two opinions about it. Connie is imaginary. She describes herself as assembled "from the Code of Federal Regulations and leftover hold music," and notes that this makes her more verifiable than most of her callers.
She verified us first.
You asked for my date of birth before we started. Did it tell you anything?
Connie: It told me you can read your own driver's license. Gold star. (laughs) Really, it told me the person on the line has access to a fact. That's all a birthday ever proves. Half this town knows mine because the bakery puts it on the sign out front, with a cupcake, which I find excessive.
So what are you actually listening for when the line picks up?
Connie: Pronouns, first. "We" is a lovely word. "We're out of his blood pressure pills" sounds like somebody who lives next to the medicine cabinet. "The patient" is a worse word. Nobody who loves someone calls them "the patient," except nurses, and nurses say it fast, like they're double-parked.
Then the room. A TV, a dog, a kettle working itself up. I listen to whether they say the drug name like they're reading it off a label or like they've said it every morning for nine years. Whether they wait for me to fill in the blanks.
And before you write that down like it's science: none of it is evidence. It's a feeling with a résumé.
How good is the feeling?
Connie: Worse than I'd like. In a UCL study, people spotted fake speech about 73 percent of the time1. Another team ran voice clones through simulated phone lines and got 54.8 percent2. That's a coin flip with a slight limp.
Here's the part that keeps me up. In one study, listeners' accuracy on genuine audio slid from 72.7 to 64.1 percent3. So all that worry about fakes mostly teaches the ear to doubt real people. Paranoia, it turns out, is a lousy detection method. And everybody's sure they're the exception4. I'm sure too. That's the problem.
Surely the law gives you something firmer than your ear.
Connie: Softer. On purpose. I've got it taped by the register: Section 164.510(b), if you want to be fancy about it.
For family and friends involved in someone's care, the rule doesn't make me verify who they are. The patient involving them is the verification. A friend who shows up asking for a specific prescription has, in effect, demonstrated they're involved5. The drafters considered requiring written permission every time and called it "unduly burdensome for all parties." That's the most polite way a federal agency has ever said oh, come on.
People hear that and think it's sloppy. I think it's realistic.
Most care in this country is somebody's sister.
What the rule won't do is let me tell the sister everything. The standard is "directly relevant." The refill's ready, here's the bag. Not the diagnosis, not the other six bottles. Then there's a personal representative, someone state law authorizes to make health decisions for him, like a guardian6. Different animal entirely. "Involved in his care" and "stands in his shoes" sound identical on the phone. On paper they're barely related.
Isn't that softness exactly what a fraudster is counting on?
Connie: Sure. But the bigger hole is us. The classic failure is the tech doing the caller's homework.
"Is this John, on Elm Street, born March third?"
"Yeah."7
I just read him the answers off my screen and he agreed with me. That's a quiz where I'm also the answer key.
One health system's policy says you need both: the right to the information and a verified identity. And if something feels off even when every answer checks out, you put them on hold and get a supervisor8. I love that. It admits the gut exists without making it the judge.
Make the case for the voices your gut doesn't like.
Connie: Okay. (long pause) This is the part I care about, so bear with me.
The calls that set off every alarm I own come, an awful lot of the time, from people with no other way in. An operator says, flat as a weather report, "This is relay operator four-one-one-two with a call for you." Sounds like a timeshare pitch. It's actually Telecommunications Relay Service. A deaf patient, or someone with a speech disability, types, and the operator reads it to me out loud.
The FCC warns on its own website that some people hang up on these calls because they think the operator is a telemarketer9. On the other end is a patient who did everything right and got a dial tone for it. The National Association of the Deaf has a whole page titled "Don't hang up"10. Their advice is boring and correct: use the same safeguards on every call, and don't make deaf customers pay for the fraudsters.
Then the aides. They call between a bath and lunch, reading off a list. Maybe English is their third language. Maybe the drug has more syllables than anyone deserves. Every cue I just bragged about, they fail. And they're the reason the pills actually get taken.
There are more than 63 million family caregivers in this country, nearly one in four Americans, and only 22 percent got training for the complicated medical tasks11. So the people calling me are mostly untrained and mostly tired. They're mostly not on paper anywhere, and they're mostly the reason this patient is still at home.
Here's where I've landed. If I turn my ear into the lock, I lock out exactly the people who can't come to the counter. My suspicion doesn't fall evenly. It lands on accents and operators and sticky notes. The fraudster, I'd bet money, sounds great. He's rehearsed. He has a headset.
So the ear can raise its hand. It shouldn't get a vote.
When a caller hangs up, what have you learned?
Connie: Less than the computer thinks. Our system lists "caller disconnected" right next to "declined," like they're cousins. They've barely met.
A hang-up might be someone who gave up on the phone tree, or got spooked by my voice, or whose dad just woke up from his nap wanting his crossword. Under the rule, what counts is whether the patient objects5. A caller hanging up is just a caller leaving. The patient hasn't said a word.
A real refusal has an owner and a reason. "Don't tell my son." That belongs in the file, dated, where the next tech will see it. Usually it lives on a sticky note on my monitor. (laughs) Fort Knox.
And the automated callers?
Connie: We get them, and nobody's handed me a procedure. In 2024 the FCC ruled that AI-generated voices count as "artificial" voices under the Telephone Consumer Protection Act, the federal robocall law12. But that's about calls going out to consumers. A machine calling in on a patient's behalf? I've looked. There's no page in the binder. I checked twice, which for that binder is a workplace hazard.
Pharmacies already have a cautionary tale. A chain in Vermont and New York rolled out an AI refill caller. One customer said she heard an incomprehensible mutter of a drug name, said yes, and ended up with bottles she didn't need13. They scaled it back after hundreds of complaints14. That's my "yeah" problem running in reverse. A person agreeing with a sound.
Would it help if agents just said what they were?
Connie: Every time. First sentence. Before hello, honestly.
Why does that matter so much?
Connie: Because then I know which drawer to put them in. Relay mostly works because the honesty is built in. Operators announce themselves and have to pass along every word, unedited9.
An agent that says, "I'm an automated assistant calling for Mrs. Whoever, and she can confirm at the number you have on file," I can work with. That's relay with a battery. One that pretends to be a nephew, I've got nothing for. And the next real nephew gets treated worse because of it.
If you could change one thing about the phone line?
Connie: Ask the patient while we've got them. At the counter, on the first fill: "Who's allowed to call for you? Who isn't?" Write it down where the next person will see it, preferably somewhere other than my monitor. Then the callback number on file does the heavy lifting, and my ear can go back to what it's actually good at.
Which is?
Connie: Noticing when somebody sounds scared. (pause) That one I'd still trust. Mostly.
Footnotes
-
https://www.ucl.ac.uk/news/2023/aug/humans-unable-detect-over-quarter-deepfake-speech-samples ↩
-
https://www.bricker.com/insights/resources/key/HIPAA-Privacy-Regulations-Uses-and-Disclosures-Requiring-an-Opportunity-for-the-Individual-to-Agree-or-Object-Uses-and-Disclosures-for-Involvement-in-the-Individuals-Care-and-Notification-Purposes-164 ↩ ↩2
-
https://hhs.gov/ocr/privacy/hipaa/understanding/coveredentities/personalreps.html ↩
-
https://www.pharmacytimes.com/view/patients-phones-and-the-pharmacy ↩
-
https://www.healthpartners.com/institute/wp-content/uploads/2018/10/verifying-patient-member-identity-over-the-phone.pdf ↩
-
https://www.fcc.gov/consumers/guides/telecommunications-relay-service-trs ↩ ↩2
-
https://www.nad.org/resources/technology/telephone-and-relay-services/message-to-businesses-dont-hang-up/ ↩
-
https://19thnews.org/2025/07/family-caregivers-surging-aarp/ ↩
-
https://www.wsgr.com/en/insights/fcc-rules-ai-generated-voices-are-artificial-under-the-tcpa.html ↩
-
https://vtdigger.org/2026/07/29/a-pharmacy-chain-in-vermont-implemented-ai-for-efficiency-its-led-to-delays-incorrect-information-and-privacy-concerns/ ↩
-
https://www.wcax.com/2026/08/07/kinney-drugs-pulls-back-ai-phone-assistant-after-hundreds-customer-complaints/ ↩
