[jonknee]

AFAIK you're good to go as long as you don't reveal any patient information (called PHI in the HIPAA world). So instead of leaving a message like, "Calling to confirm John Doe's appointment at Johnson Health Institute" it would need to be "Calling to confirm an appointment at Johnson Health Institute". That way if the number is incorrect for some reason there hasn't been a breach of privacy.