1. What counts as a healthcare payment solution
"Healthcare payment solution" is a stack, not a single product. A complete one includes a merchant account, a payment gateway, in-office hardware (terminals, customer-facing devices, or Tap to Pay on mobile), and a patient-billing layer (text-to-pay, card on file, recurring payment plans). Each layer can be sourced from a different vendor — which is exactly why so many practices end up with disconnected systems and surprise fees.
When you compare medical payment processing options, compare the whole stack — not just the swipe rate on the marketing page.
2. HIPAA compliance: what actually matters
Payment card data is regulated by PCI-DSS, not HIPAA. HIPAA enters the picture the moment a payment workflow also touches Protected Health Information — procedure codes on a receipt, diagnosis on a payment plan, patient identifiers in a billing email. The goal is to keep PHI and payment data on separate rails, and to execute a Business Associate Agreement (BAA) wherever they meet.
A HIPAA-aware payment workflow typically:
- Tokenizes card data at the device — raw card numbers never enter the practice's network
- Sends payment links and receipts without procedure or diagnosis detail
- Restricts who can view stored payment methods with role-based access
- Has a signed BAA with any vendor that handles both PHI and payment data
- Logs access for audit purposes
HIPAA compliance is a function of how the practice implements the stack, not a checkbox on a processor's website. Treat any vendor that claims to "make you HIPAA compliant" with skepticism.
3. Pricing models compared
Pricing is where healthcare practices most often overpay. Card mixes in medical, dental, and veterinary offices skew heavily toward regulated debit and HSA/FSA cards — both of which carry low interchange. Whether those savings reach the practice depends entirely on the pricing model.
Tiered pricing
Transactions are sorted into 'qualified,' 'mid-qualified,' and 'non-qualified' buckets at the processor's discretion.
Pros
- Simple statements
- Predictable monthly minimum
Watch for
- Margins are inside the tiers
- Most healthcare card mixes (rewards cards, HSA/FSA) drop into the expensive tiers
Flat-rate
One blended rate (often 2.6–2.9% + a fixed fee) regardless of card type.
Pros
- No surprises on the statement
- Fast setup
Watch for
- Overpays on debit and HSA/FSA cards
- Cost grows linearly with volume — gets expensive past ~$25K/mo
Interchange Plus
You pay the wholesale interchange rate set by the card networks plus a fixed processor markup.
Pros
- Transparent: every line item is visible
- Healthcare card mix (HSA/FSA, debit) is priced fairly
- Savings scale with volume
Watch for
- Statements take a few minutes to read
- Requires an honest provider to keep the markup fixed
Membership / subscription
Flat monthly fee plus pass-through interchange and small per-transaction charge.
Pros
- Often a lower effective cost at higher volume
- Clean reporting
Watch for
- Monthly fee can be wasted at low volume
- Fewer providers offer it for healthcare specifically
For most independent practices, Interchange Plus often produces a lower true cost because healthcare card mixes reward transparency. The catch: the markup has to actually stay fixed, which is why processor incentives matter.
More on the model itself: Interchange Plus pricing explained.
4. Practice management software integrations
The single largest source of wasted staff time in a healthcare front office is double entry — running a card on a terminal, then re-keying the amount into the PMS or EHR. A directly integrated payment workflow eliminates that step, posts the charge to the patient ledger automatically, and makes refunds reversible without a separate authorization. JustPayments supports integrations across 30+ practice management, EHR, PIMS, and accounting platforms commonly used in US practices.
Practice management & EHR
Open Dental, Dentrix, Eaglesoft, athenahealth, DrChrono, Kareo, NextGen, eClinicalWorks
Veterinary & specialty PIMS
AVImark, Cornerstone, ezyVet, IDEXX Neo, ImproMed
Accounting & reconciliation
QuickBooks, Xero, Sage
Patient engagement
Text-to-pay platforms, automated appointment reminders, patient portals
If a vendor can't name your specific PMS, ask whether they integrate via a public API, a third-party middleware, or not at all. "We can build it" usually means a six-figure custom quote.
5. Patient-centric billing tools
Post-visit collections are the slowest-moving dollars in most practices. The tools below shorten that window without putting staff on the phone.
Text-to-pay
Send a secure payment link by SMS or email after the visit. Patients tap once, enter a card or HSA/FSA card, and the balance posts to the ledger — no portal login, no paper statement.
Card on file (vaulted)
Tokenized storage of a patient's card for residual balances, copay differences, or recurring treatment plans. Reduces 30/60/90-day A/R without manual re-keying.
Payment plans
Split larger balances into scheduled installments. Compliant with card-brand rules when set up as recurring tokenized charges with patient consent.
HSA / FSA acceptance
Most healthcare merchant categories qualify HSA/FSA cards at a lower interchange rate. On Interchange Plus pricing, those savings reach the practice instead of the processor.
6. Evaluation checklist
Take this list to any proposal. Vendors that can't answer the first three questions clearly are usually selling a tiered or flat-rate product with margin.
- 1.Does the processor support Interchange Plus pricing, or only tiered/flat?
- 2.Will they sign a Business Associate Agreement (BAA) if PHI touches the payment workflow?
- 3.Does the gateway integrate directly with your PMS / EHR, or require manual re-keying?
- 4.Are text-to-pay, card on file, and payment plans included or paid add-ons?
- 5.Is the equipment owned outright, or leased on a long-term contract?
- 6.Are there early-termination fees or auto-renewing contracts?
- 7.How are HSA / FSA cards priced versus standard credit cards?
- 8.Who owns the merchant account — you, or the processor?
7. Frequently asked questions
What is a healthcare payment solution?
A combination of merchant account, gateway, terminals, and patient-billing tools (text-to-pay, card on file, payment plans) configured for the workflows of a medical, dental, veterinary, or specialty practice. The 'solution' is the full stack, not just the card reader.
Is medical payment processing required to be HIPAA compliant?
Payment data itself is PCI-DSS regulated, not HIPAA. HIPAA applies when protected health information (PHI) — diagnoses, procedure codes, patient identifiers — touches the payment workflow. Practices should isolate PHI from the payment channel where possible and execute a Business Associate Agreement with any vendor that handles both.
What's the cheapest pricing model for a healthcare practice?
For most practices over a few thousand dollars in monthly volume, Interchange Plus often produces a lower true cost because healthcare card mixes lean heavily on regulated debit and HSA/FSA cards that carry low interchange. Tiered and flat-rate models bury those savings in the markup.
Should patient payments go through the PMS or a separate terminal?
Integrated is almost always better: charges post to the patient ledger automatically, refunds are reversible, and end-of-day reconciliation collapses to one report. Standalone terminals are fine as a fallback but create double entry.
What is text-to-pay and is it secure?
Text-to-pay sends a one-time secure URL by SMS or email. The patient enters card details on a PCI-compliant hosted page — the card number never reaches the practice's phone, email, or staff. It's the fastest single change most practices can make to reduce post-visit A/R.