A medical practice buying an answering service is handing protected health information to a third party, and that changes the order of the purchase. Price, features and hours all matter, but they matter after the compliance question, because a provider that cannot sign a business associate agreement cannot be used at all regardless of how good the rest of the offer looks.
The business associate agreement is the gate
Any provider handling patient information on the practice's behalf is a business associate, and a signed agreement is required before a single call is taken. This is a yes or no question and it should be the first one asked, because it removes providers from the shortlist before anybody spends time on pricing. Ask to see the agreement rather than a claim of compliance on a marketing page: what matters is what the document says about breach notification, subcontractors and what happens to your data when you leave.
Compliance is operational, not just contractual
A signed agreement does not by itself protect anything. What does is how the provider actually handles the information: whether messages are delivered over an encrypted channel rather than plain email or SMS, whether operators are trained on minimum necessary disclosure, whether call recordings containing patient details are retained and for how long, and whether an operator can leave a detailed message on a voicemail that a family member might hear. Ask for the answers to those four, because they are where the real exposure sits.
Triage is not the operator's job
An operator cannot assess a symptom and must not appear to. The script needs an explicit escalation list naming the words that stop the normal flow and route to the on-call clinician, and an explicit instruction not to offer any view on urgency. Practices sometimes want more than that, understandably, and the answer is that a clinically trained line is a different and more expensive product. Buying a general answering service and hoping the operators use judgement is the failure mode this section exists to name.
What it costs a practice
Practices usually need diary access and out-of-hours escalation, which places them above the cheapest tiers. The receptionist-tier plans in this record publish entry prices of one hundred and sixty five to three hundred and ninety nine dollars a month for around fifty included minutes or calls, and two of those providers publish no rate for exceeding it. Since a practice will pass fifty minutes quickly, establishing that rate is more important here than the difference between the advertised plans.
Questions people ask about answering service for medical office
Does a medical answering service need a HIPAA business associate agreement?
Yes, signed before any call is taken. It is the first question to ask because it removes providers from the shortlist before anyone spends time on pricing, and you should read the document rather than trust a compliance claim on a marketing page.
What makes an answering service actually HIPAA compliant?
Operational things, not just the agreement: encrypted message delivery rather than plain email or SMS, training on minimum necessary disclosure, a defined retention period for recordings containing patient details, and a rule about what may be left on a voicemail.
Can an answering service triage patient calls?
No. It can apply an escalation list you wrote, naming the words that route straight to the on-call clinician, and it must not offer any view on urgency. A clinically staffed line is a different and more expensive product.
How much does a medical office answering service cost?
Practices generally need diary access and out-of-hours escalation, which puts them in the receptionist tier: published entry plans of one hundred and sixty five to three hundred and ninety nine dollars a month for about fifty included minutes or calls.