Doctors Email List and Healthcare Email Lists: Nurses, Dentists, Hospitals and the Compliance Rules

The American Medical Association keeps data on more than 1.5 million US physicians, residents and medical students, and its FAQ on that data states that readable email addresses "are not licensed or sold to any third parties". The doctor emails on any list for sale come from somewhere else: practice websites, public registries matched to email formats, data compilers and the doctors themselves. This guide shows where a doctors email list comes from, what physician, nurse, dentist and hospital lists contain and cost, who actually buys in each setting, and the rules that apply when you email, call or text healthcare professionals: HIPAA, CAN-SPAM and the TCPA in the US, and GDPR with the national email laws in Europe.

Get thousands of leads in 4 minutes.

Stop stitching tools together.
Start with verified sales data, delivered in minutes.

SCALE SALES NOW

No contracts · No setup · No onboarding

What a doctors email list contains, and what it must leave out

A doctors email list is a set of professional contact records: one row per clinician, or per decision-maker at a practice, clinic or hospital. The fields worth paying for are the ones you can check against a public source.

What a sales list must leave out is just as clear: patient records, diagnoses, treatment histories and anything that states or suggests something about a person's health. A professional contact list has no use for any of it, and in the EU that kind of information is a special category of personal data (see the compliance section below).

Emails on healthcare lists come in four kinds, and they behave differently:

• Named work address (jane.doe@practice.com): reaches the clinician or manager. This is the one you want.
• Role address (info@ or frontdesk@): reaches whoever reads the shared inbox, usually the front desk.
• Personal address (Gmail, Yahoo): common on nurse lists. Under EU and UK email rules the person behind it is an individual subscriber, so prior consent applies unless they are already your customer.
• Direct address: a secure clinical messaging address. HealthIT.gov describes Direct as "secure email-based solutions" inside certified health IT "to send and receive encrypted patient information". It is a channel for patient data, not a sales inbox.

We checked what the public data holds. We pulled 600 individual records from the NPI Registry API, the first 200 results of each of three searches: orthopaedic surgery with Texas addresses, and nurse practitioners and dentists with Ohio addresses. None had an email field. 58 listed an "endpoint" (25 surgeons, 30 nurse practitioners and 3 dentists), and 52 of those were Direct addresses.

Before you buy, compare a vendor's counts with the size of each US group:

If a vendor claims far more US doctors than 1.08 million, ask what else it counts: residents, students, retired physicians, duplicates or staff who are not physicians.

Where a healthcare email list comes from

Every healthcare email list is assembled from a handful of source types. The free public ones give you names, specialties and addresses; none of them gives you a verified email.

The NPI Registry (CMS). CMS publishes the full NPPES file free every month, with weekly updates; the monthly file is a 1.1 GB zip. Each record holds the provider's name, credential, NPI, taxonomy (specialty) codes, practice and mailing addresses, phone and fax. CMS adds a warning worth remembering: issuing an NPI "does not ensure or validate that the Health Care Provider is Licensed or Credentialed".

The CMS Doctors and Clinicians file. The national downloadable file covers clinicians enrolled in Medicare, with one row per clinician, enrollment, group and address (3,630,233 rows in the file). It adds medical school, graduation year, primary and secondary specialties, the group practice and the number of clinicians in that group, which tells you practice size. It has no emails.

AMA Physician Professional Data, formerly the AMA Physician Masterfile. The AMA licenses it to database licensees, who sublicense it to healthcare companies. It covers education, licensure, specialty and practice data. The AMA collects practice email addresses too, but does not license readable ones, and physicians can elect Do Not Contact, which keeps their name out of licensed data used for marketing "via mail, telephone, fax, social media, or through programmatic marketing". The AMA notes that a request can take 90 days or more to reach every end user.

State licensing boards and Nursys. These confirm license status, discipline and expiry. NCSBN describes Nursys as "the only national database for verification of nurse licensure, discipline and practice privileges" for RNs, APRNs and LPN/VNs from participating boards. Its terms limit use to verifying licensure and discipline for licensure, endorsement or employment, and prohibit commercial reuse and automated data extraction. Use it to check a nurse's license, not to build a list.

Practice and hospital websites. Team pages, contact pages and press releases give names, roles and the email format a practice uses. Many small practices publish only a front desk address or a contact form.

Data vendors. They combine the sources above with their own collection and verification. Two questions decide whether a vendor's file is worth anything: where did each email come from, and when was it last checked?

How to find doctors email addresses without buying a list

For a short list of high-value practices, building it yourself works:

1. Pull the NPI record for the exact name, credential, specialty code and practice address.
2. Find the practice domain. The CMS file names the group practice; search that name with the city.
3. Read the team and contact pages for the email format (jane.doe@ or jdoe@) and the practice manager's name.
4. Build the likely address and check it with a verification tool before you send. Our comparison of email finder tools covers the options.
5. Note the source and date of every address. You need them to handle opt-outs and, for EU contacts, to send the GDPR notice.
6. Leave out Direct addresses from NPI endpoints, and personal addresses.

If you research doctors on LinkedIn too, Spona's approved rule applies: "Use LinkedIn information only through authorized means consistent with applicable law and LinkedIn's terms, without unauthorized scraping, automated extraction or bypassing access restrictions."

Physicians email list: owners, employed doctors and specialties

The doctor you email is often not the person who buys. The AMA's 2024 Physician Practice Benchmark Survey found that the share of physicians working in private practices fell from 60.1% in 2012 to 42.2% in 2024, as practices grew larger and were more often owned by hospitals or other organizations. A physicians email list that holds only clinicians misses many of the people who sign for purchases.

The owner physician of a small practice is the buyer; an employed physician at a health system is usually an influencer rather than the buyer. Plan the physician email list around that split before you pick specialties.

Where to find a mailing list for physicians

For postal mail, the NPI Registry and the CMS files give you practice addresses for free, and AMA database licensees sell mailing lists built on AMA data, with Do Not Contact physicians removed. For email there is no official source: build it from practice domains, or buy from a vendor that can show the source and date of each record.

Orthopedic doctors email list and other specialty lists

Filter a specialty list by the taxonomy code in the NPI record, which comes from the NUCC code set, not by words in a job title. Orthopaedic surgery (NUCC's spelling) is 207X00000X, with subspecialty codes such as 207XS0117X for spine, 207XX0005X for sports medicine and 207XS0106X for hand surgery. In our 200 Texas records, 69 surgeons had a subspecialty code as their primary taxonomy, and 34 of them did not list the general code at all. A filter on 207X00000X alone would have missed those 34, about one surgeon in six. Pull the whole code family for every specialty.

Nurses email list: registered nurses and nurse practitioners

Nurses are the largest group in healthcare and the hardest to reach as buyers. BLS counts 3,465,400 registered nurse jobs: 59% in hospitals, 19% in ambulatory care such as physicians' offices and home health, 6% in nursing and residential care facilities, 5% in government and 3% in education. Staff nurses rarely sign a purchase order; nurse managers, directors of nursing and chief nursing officers do.

Read a nurse list offer before you buy it. Datazapp's nurse list page charges $0.04 per record with an email and $0.05 with email and phone, and promotes direct access to nurses through their cell phones or personal email. DMDatabases files its nurse email list under consumer databases. Personal cell numbers bring in the TCPA rules on calls and texts, and the personal emails of nurses in the EU or the UK fall under the email rules for individuals.

Registered nurses email list

There is no public email source for registered nurses. State boards and Nursys confirm licenses, and Nursys terms rule out commercial reuse. That leaves two kinds of registered nurses email list: consumer files with personal addresses, built for recruiters, and work addresses at hospitals and ambulatory care providers, where 78% of RNs work. To sell to hospitals and clinics, build the second kind by role: chief nursing officer, director of nursing, nurse manager and clinical educator.

Nurse practitioners email list

Nurse practitioners are easier to find, because they have their own records in the NPI Registry. BLS counts 336,300 nurse practitioner jobs, and their NPI records carry taxonomy codes in the 363L family: family nurse practitioner (363LF0000X) was the primary code for 110 of our 200 Ohio records. Build a nurse practitioners email list the way you build a physician list: NPI record first, then the practice domain, then verification.

Dentist email list: practice owners, office managers and DSOs

Dentistry is still an owner's market. The ADA Health Policy Institute counts 205,088 professionally active dentists, and its workforce report shows that 73% of dentists owned their practice in 2023, down from 85% in 2005. The share affiliated with a dental support organization (DSO) more than doubled, from 7.2% in 2015 to 16.1% in 2024. A dentist email list should name the owner for most practices, and the central operations or procurement team for DSO-affiliated ones.

Dentist NPI records use the 1223 taxonomy family: 122300000X for dentist and 1223G0001X for general practice, then specialties such as orthodontics and periodontics. Only 3 of our 200 Ohio dentist records listed an endpoint, so Direct addresses were rare in that sample.

Dentist email address list: who to contact in a dental practice

A small practice usually has one or two people to reach. Spona's inventory holds about 1.4 verified contacts per US dental practice (140,000 contacts for 100,000 practices), but the count does not show which roles those contacts hold, so check for the owner and the office manager before you send.

Hospitals email list: administrators and healthcare executives

The AHA counts 6,100 US hospitals. Of those, 5,121 are community hospitals, and 70% of them (3,567) belong to a health system. Two directories cover them, and neither is a ready hospital email list:

• CMS Hospital General Information (free): 5,419 hospitals registered with Medicare, with address, phone, hospital type, ownership, emergency services and star rating. No contact names or emails.
• AHA Guide (paid): profiles of more than 6,200 hospitals and 400 health systems, including C-suite and personnel counts.

A hospitals email list needs depth more than breadth, because buying runs through committees and, for system-affiliated hospitals, often through the system's head office. Spona's inventory shows the difference: about 7 verified contacts per US hospital (35,000 for 5,000), against about 1.5 per clinic.

Healthcare executives email list: the roles that sign

Match the role to what you sell:

• Chief information officer and chief information security officer: software, EHR add-ons, security.
• Chief financial officer and revenue cycle director: billing, coding, payments and collections.
• Chief nursing officer: nurse staffing, scheduling and clinical workflow tools.
• Chief medical officer: clinical tools that change how physicians work.
• Vice president of supply chain or materials management: devices, consumables and equipment.
• Chief operating officer: facilities, operations and outsourcing.

For a health system, start your healthcare executives email list at system level, because the same title at a member hospital may not hold the budget.

Doctors email list compliance: HIPAA, CAN-SPAM, TCPA and GDPR

This section quotes the regulators and their official guidance. It is a summary, not legal advice.

HIPAA and a doctors email list: what it covers and what it does not

HIPAA applies to covered entities and their business associates. Covered entities are health plans, health care clearinghouses and health care providers that transmit health information electronically in connection with a transaction for which HHS has adopted a standard. HHS states that if an entity does not meet the definition of a covered entity or business associate, "it does not have to comply with the HIPAA Rules."

What HIPAA protects is protected health information (PHI): individually identifiable health information about a person's physical or mental health, the care they receive or payment for that care, held or transmitted by a covered entity or business associate (45 CFR 160.103). The definition excludes employment records that a covered entity holds in its role as employer.

Three practical points follow from those definitions:

• A doctor's name, specialty and work email on a sales list say nothing about anyone's health, care or payment for care, so they are not PHI under the HHS definition. It follows that HIPAA does not govern a sales email to that doctor; CAN-SPAM does.
• HIPAA reaches you when your product or service handles patient information for a practice. HHS defines a business associate as an organization that "performs certain functions or activities on behalf of, or provides certain services to, a covered entity" involving that information. The practice must then have a written business associate contract or other arrangement with you, and HHS adds that business associates "are directly liable for compliance with certain provisions of the HIPAA Rules."
• Asking a practice to promote your product to its patients is a HIPAA question for the practice: a covered entity "must obtain an authorization to use or disclose protected health information for marketing", with narrow exceptions.

CAN-SPAM rules for every healthcare email list

The FTC's CAN-SPAM compliance guide is plain about B2B: "The law makes no exception for business-to-business email." Every commercial email to a doctor, nurse or hospital must:

1. Use accurate header and routing information.
2. Use a subject line that reflects the content.
3. Identify the message as an ad.
4. Include your valid physical postal address.
5. Explain how to opt out of future email from you.
6. Honor opt-out requests within 10 business days.
7. Monitor anyone who emails on your behalf: you stay responsible for what they send.

The FTC guide puts the penalty at up to $53,088 for each separate email in violation, and the FTC's inflation adjustment notice keeps the 2025 penalty levels for 2026.

TCPA rules for calling, texting and faxing doctors

The FCC's TCPA rules at 47 CFR 64.1200 name healthcare lines directly. A call made with an autodialer or an artificial or prerecorded voice needs the called party's prior express consent when it goes to:

• "any emergency line of a hospital, medical physician or service office, health care facility";
• "any guest room or patient room of a hospital, health care facility, elderly home, or similar establishment";
• a cell phone number.

When such a call is telemarketing, the rule requires prior express written consent for those lines. The do-not-call rules in the same section protect residential subscribers, and paragraph (e) applies them to telemarketing calls and text messages to wireless numbers, which is where a nurse's personal cell phone sits. NPI records list fax numbers too, but an unsolicited fax ad is allowed only from a sender with an established business relationship with the recipient, among other conditions (paragraph (a)(4)).

For calls you dial by hand to a practice's main line, the FTC's Telemarketing Sales Rule exempts business-to-business calls from most of its requirements, but not from its bans on misrepresentations and false or misleading statements (16 CFR 310.6(b)(7)).

GDPR, health data and doctors email lists in Europe

Under the GDPR, a named doctor's work email is personal data (Article 4(1)). Data concerning health, "personal data related to the physical or mental health of a natural person, including the provision of health care services, which reveal information about his or her health status" (Article 4(15)), is a special category whose processing Article 9(1) prohibits unless an exception applies. A professional contact list should hold no health data at all, including inferences about anyone's health.

For the contact data itself, the regulation sets four duties:

• Lawful basis. Recital 47 says processing for direct marketing "may be regarded as carried out for a legitimate interest", provided the person's interests and rights do not override it.
• Transparency. When the data came from a list, Article 14 requires your notice within a reasonable period and at the latest within one month, or at the latest at your first message if you use the data to contact the person.
• Objection. Under Article 21, a person can object to direct marketing at any time, and the data "shall no longer be processed for such purposes".
• Email consent. Article 13 of the ePrivacy Directive requires prior consent for email marketing to subscribers who are natural persons, with an exception for your own similar products marketed to existing customers (Article 13(2)), and leaves the rules for companies to each country.

The national differences matter for healthcare outreach:

• France: the CNIL allows B2B email prospecting on legitimate interest when the message relates to the recipient's profession, provided the person was informed and can object simply and free of charge.
• Germany: Section 7 of the UWG treats advertising by email without the recipient's prior express consent as an unreasonable nuisance, with a narrow exception for existing customers.
• United Kingdom: the ICO treats companies, LLPs and Scottish partnerships as corporate subscribers, to which the PECR email rule does not apply (you must still identify yourself and give a valid opt-out address), and classes sole traders and other partnerships as individual subscribers. The ICO notes that this guidance is under review after the Data (Use and Access) Act. In England the GP partnership is "the main legal structure for the delivery of NHS general practice", so check a practice's legal form before you email it. UK GDPR applies to business contacts either way.

Spona's approved line for purchased lists in the EU: "Buying a B2B list does not grant permission to email it; establish a lawful basis for personal data processing, meet transparency and objection duties, and follow the recipient country's electronic marketing rules, including prior consent where required."

Buy a doctors email list or build one: what each option costs

Price per record is the wrong comparison. Compare the cost per verified contact who can buy, then the cost per meeting. A $0.04 nurse record that lands in a personal inbox is expensive if you sell software to hospitals. For the general trade-offs and the legal checks before any purchase, see our guide to buying an email list, and for the build route, our B2B email list guide.

How to use a healthcare email list: verify, segment, send

1. Verify every address before the first send. In Spona data for a 90-day period, 78% of 10,000 US candidate addresses passed verification, 14% were catch-all and 8% were rejected. Sends to the verified addresses hard-bounced 1.5% of the time (75 of 5,000). Spona has not split these rates by industry or role, so there is no healthcare figure. Aim for hard bounces below 2% on a freshly checked list; our guide to B2B data validation explains the checks.
2. Recheck before each campaign. In a stable Spona panel of 10,000 US records, 6.5% of emails changed or became invalid in one quarter. Spona verifies an email again before a send if the last check is more than 30 days old. Our article on data decay covers why records go stale.
3. Segment by setting before specialty. Owner or employed, practice size (the CMS group member count), system-affiliated or independent; then specialty by taxonomy code.
4. Write for the role. A practice manager cares about the front desk, a CFO about collections, a CNO about staffing. Keep the first email short and specific; our B2B cold email templates are a starting point.
5. Keep one suppression list across all tools. Opt-outs (honored within 10 business days under CAN-SPAM), hard bounces and objections from EU contacts all go on it.
6. Never ask for patient information. No patient lists, no case details, no screenshots with patient data.

Where Spona fits, and where it does not

Spona builds lead lists from a chat. You describe the customers you want, for example owners of dental practices in Texas or supply chain directors at hospital systems in Ohio; the AI mines 40+ sources, verifies every lead and delivers a scored list in about 4 minutes. You pay per lead.

These are rounded Spona data counts. Country means company headquarters, which is a different unit from the AHA's count of hospitals, and the groups can overlap.

Spona fits when you sell to healthcare organizations as businesses: clinics, hospitals and dental practices, and the people who buy for them, such as owners, practice managers, administrators and the procurement, finance and IT leads. You can test free sample leads first, and qualified leads cost $0.32 to $4 each, with bulk leads from $0.01.

The limits, as Spona states them:

• Spona scopes healthcare prospecting to organizations and professional buying roles, including practitioners when they own a practice or influence procurement. Records carry fields such as professional name, role, employer, website, location, work email and business telephone, subject to availability.
• Spona excludes patient records, diagnoses, treatment histories and inferred personal health information, and documents the lawful basis, source, transparency notice and suppression process for professional contact data.
• Spona's public material does not establish practitioner coverage, a healthcare-specific consent model or a country exclusion list. Each market and outreach channel you request needs a documented review before Spona makes that promise.
• If you need every nurse practitioner in a state, every physician in a specialty by NPI, or postal mailing lists with AMA Do Not Contact handling, a specialty list built on NPPES or bought from an AMA database licensee is the better fit.

Spona's rule for healthcare contacts, word for word: "Use professional healthcare contact details only for an appropriate business purpose with a documented lawful basis, required transparency and applicable outreach permissions, and exclude patient records and information about an individual's health."

Get thousands of leads in 4 minutes.

Stop stitching tools together.
Start with verified sales data, delivered in minutes.

SCALE SALES NOW

No contracts · No setup · No onboarding

Doctors email list FAQ

Is there a free doctors email list?

Not a reliable one. The free official sources, the NPI Registry and the CMS Doctors and Clinicians file, give names, specialties, addresses and phone numbers but no email addresses. A free email list of doctors that you can download rarely shows where the addresses came from or when they were checked, so verify every address before you use it. The same goes for a free dentist email list.

Where can I find healthcare mailing lists?

For postal lists: the NPI and CMS files for free, AMA database licensees for physicians, and the AHA Guide for hospitals. For email: build the list from practice and hospital domains, or buy from a vendor that documents the source and date of each record and removes opt-outs.

Is there a database of nurses' email addresses?

Not a public one. Nursys is the national database for verifying nurse licenses, and its terms rule out commercial use. Nurses email lists for sale are compiled by vendors, often from personal addresses. For B2B sales, build a list of nurse leaders at hospitals and clinics instead.

What is a hospital directory, and does it list email addresses?

A hospital directory lists hospitals with their address, type and ownership. CMS publishes a free one, Hospital General Information, with 5,419 Medicare-registered hospitals and no contact names or emails. The AHA Guide is the paid industry directory, with profiles of more than 6,200 hospitals and 400 health systems, including C-suite.

Is a doctor's email address protected health information?

Not under the HHS definition, as long as the list holds only professional contact details. HHS defines PHI as individually identifiable health information about a person's health, care or payment for care, held or transmitted by a covered entity or a business associate. A doctor's work email, used to contact the doctor about a product, is not information about anyone's health. This follows from the definition; it is not legal advice.

How to find an email list?

For any industry the choice is the same: build the list from public sources and verify it, or buy one and check its sources. Our guide to buying an email list compares both.

Who are the top healthcare email list providers?

The best provider is the one that can prove its records for your segment. Ask each one for a sample of 100 records in your exact target, the source and last-checked date of every email, its verification and bounce rates, how it handles opt-outs and Do Not Contact flags, and whether the file holds work or personal addresses. Then compare cost per verified buyer, not cost per record.