Placed in-app, after Auth0, before main UI
Auth0's screens (password reset, OAuth consent) are off-limits for custom marketing consent. The first screen your code controls after the redirect is the right place. Show it on first login only; persist the answer per user.
Checkbox is UNCHECKED by default
Twilio rejects pre-checked consent (error 30925). The user must actively check the box. Twilio's reviewer will look for this in the screenshot.
Continue works even without consent
TCPA prohibits making SMS consent a condition of service. If the box is unchecked, the user proceeds into the app — they just don't get SMS. Pre-existing nurses can opt in later from Settings.
Disclosure text contains all required language
Program purpose, "Message frequency varies," "Msg & data rates may apply," STOP/HELP instructions, and links to both SMS Terms and Privacy Policy — all in one block, all readable in the screenshot.
Phone number shown with edit option
Use the number already on the nurse's record (from their HR/onboarding data). Let them correct it inline. This is what they're consenting to receive SMS at.