How to find a doctor's email address: a guide for sales and recruiting teams

This guide is for sales, marketing and recruiting teams that need to reach physicians and other clinicians. If you are a patient trying to email your own doctor, your doctor's patient portal or office is the right place to start.

Does the NPI Registry list a doctor's email address

No. The NPI Registry is the most common starting point, and it has no email field.

What CMS publishes is set by a 2007 notice on NPPES data: names, credentials, mailing and practice location addresses with phone and fax numbers, taxonomy codes, license numbers and states, other identifiers and key dates. Email is not on the list.¹ The NPPES download file confirms it: there is no email field, only addresses, phone and fax numbers.²

The registry is still the right first step. It tells you who the doctor is, their specialty and where they say they practice. See how to read an NPI record.

What phone number shows up in an NPI lookup

An NPI record lists a phone number for the practice location and one for the mailing address.² In most cases that is the practice's front desk, a billing office or a hospital switchboard, not the doctor's direct line.

It is still useful. The front desk can confirm whether the doctor still practices there, and the practice manager is often the person who decides on tools and services for a small practice.

What the Direct address in NPPES is for, and why it is not a sales inbox

Some NPI records list "endpoints". These are digital contact addresses for sending authenticated, encrypted health information, such as a Direct address or a FHIR server, and each comes with use terms.³

CMS asks providers to list them so other clinicians can exchange patient information securely.⁴ They are not for sales or recruiting outreach. Do not use them.

How to find a doctor's email address on a practice or hospital website

Start where the doctor works today, not where the NPI record says they worked.

1. Confirm the current site. Check the practice location on the NPI record against the practice's or hospital's own website, which usually lists its physicians.
2. Look for a published address. Bio pages, department pages, faculty directories at academic centers and journal articles (where the corresponding author's email is published) sometimes list one.
3. Find the domain. Note the domain the site uses. Employed physicians at a health system usually use the system's domain, even at a small clinic.
4. Find the pattern. Any published address at that domain shows the format others follow.

Doctor email address examples: the formats hospitals and medical groups use

Most organizations use one of a few patterns. These examples use the reserved example.org domain.

Large health systems often add numbers or middle initials for common names, so a guessed address needs verification. The hard part is usually the domain, not the pattern: a doctor at a clinic owned by a health system emails from the system's domain, not the clinic's.

Why one data provider misses so many doctors' email addresses

Doctors are hard to cover with one source, for reasons that come from how healthcare is organized.

• Several sites. Many physicians practice at more than one location, and NPPES lists only one primary practice location in the main file.⁵
• Employer domains. A database that ties a person to one company by email domain may file a clinic physician under the wrong organization, or miss them.
• Stale records. Providers must update NPPES within 30 days of a change, but they report it themselves.⁶
• Home and PO box addresses. Since 2024, providers who practice only from home can list a PO box.⁷

Research backs this up. A 2015 study that phoned 1,200 physicians sampled from NPPES could not confirm about 35% at their listed practice, and found that combining NPPES with two other physician files produced 14% more correct addresses than NPPES alone. No single file was complete.⁸ The data is old, but the lesson holds.

How waterfall enrichment finds a doctor's work email

Waterfall enrichment checks several data sources in a set order and stops at the first verified result. Because each source covers different doctors, the waterfall finds more than any one source can.

1. 1

   Start from the NPI

   The NPI identifies the doctor without confusing two physicians with the same name.

2. 2

   Place the doctor at a site

   Match the doctor to the hospital, clinic or group where they practice today, and the organization above it.

3. 3

   Check the first source

   Look for a work email tied to that person and that domain.

4. 4

   Move to the next source

   If the first returns nothing, or nothing verified, try the next.

5. 5

   Verify and stop

   Validate the address, and stop at the first one that passes.

Dmand AI runs this waterfall across 20+ healthcare-specific sources for its 7.4M+ HCPs, and validates each result before it reaches your list. Its NPI contact enrichment API does the same from a Type 1 NPI, returning a professional email, a personal email for recruiting or a direct dial, and charges credits only when it finds one.

How to verify a doctor's email address before you send

Verification protects your sender reputation. A high bounce rate gets your domain flagged, and then even good emails land in spam.

• Check the domain. Confirm it has a working mail server.
• Check the address. A verifier asks the mail server whether the mailbox exists, without sending.
• Watch for catch-all servers. Many hospital mail servers accept every address, so a "valid" result does not prove the mailbox is real.
• Send in small batches. Watch the first bounces before you scale.
• Remove hard bounces at once. Never send to them again.

How to find a physician's direct phone number

The NPI phone number reaches the practice. For a direct line, you have three options:

1. Ask the practice. For small practices, the front desk or practice manager may connect you.
2. Use the hospital directory. Hospital switchboards can transfer you to a department, though rarely to a physician directly.
3. Use enrichment. Contact data providers return direct dials and mobile numbers where they have them, and a waterfall checks several.

Mobile numbers come with rules. See the last section before you dial.

Work email or personal email: what sales teams and recruiters should use

For selling a product or service, use the work email. It reaches the doctor in their professional role and keeps the conversation tied to the organization that would buy.

Recruiting is different. Physicians often prefer to hear about new jobs on a personal address rather than at work. Recruiters use personal emails matched to the physician's identity, such as their NPI, by enrichment providers. Whether CAN-SPAM applies to a job offer is not settled by any FTC statement we found, so follow its duties anyway and check with counsel.

CAN-SPAM rules for emailing doctors

CAN-SPAM applies to commercial email, including business-to-business email to doctors. The FTC says there is no exception for B2B messages.⁹ Every commercial email must:

• Use accurate header information and a subject line that matches the content
• Say clearly that the message is an ad
• Include a valid physical postal address
• Give a clear way to opt out, and keep it working for at least 30 days after sending
• Honor opt-out requests within 10 business days

Each email that breaks the law can cost up to $53,088 in civil penalties, and hiring a vendor to send it does not remove your liability.⁹ This is a summary for sales teams, not legal advice.

Rules for calling a doctor's cell phone

Calls have their own rules. The FTC's Telemarketing Sales Rule exempts most calls to businesses, though not calls to a business line that pitch something for the employee's personal use.¹⁰

Cell phones are stricter. Under FCC rules, autodialed or prerecorded calls to a wireless number need the person's prior express consent, and prior express written consent if the call is telemarketing.¹¹ Check with counsel before you put mobile numbers into an auto-dialer.