Medical Shredding Service for Boston Healthcare Practices.
HIPAA compliant destruction of patient records, billing files and PHI for Metro Boston medical offices, dental practices and behavioral health providers.
Business Associate Agreement included at no charge. Certificate of Destruction emailed within 24 hours of every pickup. AAA+ Rated destruction with documented chain of custody.
Medical shredding is HIPAA compliant destruction of protected health information (PHI) at end of retention. Every Massachusetts medical practice has a legal obligation under the HIPAA Privacy Rule and the Massachusetts 201 CMR 17.00 data security regulation to dispose of patient records in a manner that renders the information unreadable, indecipherable and unable to be reconstructed. Our service meets both requirements with documented evidence you keep in the compliance file.
Medical Records We Shred
Every healthcare record format contains PHI. We destroy all of them under one Business Associate Agreement.
- Paper patient charts, active and archived
- Billing files, insurance claims, EOBs, denied claim correspondence
- Lab results, pathology reports, radiology and imaging reports
- Prescription pads, pharmacy correspondence, medication administration records
- Pre-authorization forms, referral requests, prior auth denials
- Behavioral health session notes, treatment plans, psychiatric evaluations
- Appointment schedules, sign-in sheets, daily visit logs
- HR records for clinical staff that reference patient encounters
- Dental X-rays, dental charts, periodontal records
- Hard drives, backup tapes and portable media with PHI
- Fax cover sheets, scratch notes, sticky notes with patient identifiers
HIPAA Compliance Built Into Every Pickup
HIPAA Privacy Rule 164.530(c) requires covered entities to have policies and procedures designed to limit incidental uses or disclosures during disposal. The Office for Civil Rights enforces this with breach penalties from $100 to $50,000 per violation. Our service builds compliance into every step.
Business Associate Agreement. Signed before your first pickup. Aligns with HHS guidance and covers permitted uses, breach notification, subcontractor rules and termination.
Chain of custody. Locked containers from your office to our facility. Driver background checks, GPS tracking, two-person verification at receiving.
Certificate of Destruction. Emailed within 24 hours. Lists pickup date, weight or count, destruction method, witness signature and your BAA reference number. OCR auditors accept this as proof of compliant disposal.
AAA+ Rated destruction. NAID AAA+ Certified industrial shredders cut PHI to particle sizes that exceed HIPAA, FACTA and Massachusetts 201 CMR 17.00 requirements. Material recycles into pulp the same week.
Healthcare Practices We Serve
Our medical shredding clients span the full Massachusetts healthcare landscape.
- Primary care offices and family medicine practices
- Specialty clinics: cardiology, oncology, orthopedic, dermatology, gastroenterology
- Dental practices, orthodontics, oral surgery, periodontics
- Behavioral health and counseling practices
- Physical therapy, occupational therapy, chiropractic offices
- Home health agencies and hospice services
- Medical billing companies and revenue cycle vendors
- Independent labs, imaging centers, sleep clinics
- Long term care facilities and assisted living communities
- Medical device companies with patient data exposure
Service Options for Medical Practices
One time purge. End of year cleanup, office move, retirement, sale of practice. We arrive with locked totes, you load patient files, we issue the Certificate within 24 hours. 99 cents per pound, no minimum past pickup fee.
Scheduled console service. Locked HIPAA consoles installed at your office, swapped on a recurring schedule. Standard for practices with daily PHI generation. From $195 per month.
Drop off at our Tewksbury facility. Walk in any business hour. 99 cents per pound, no minimum. Practical for small practices and solo providers.
Witnessed medical shredding. For sealed records under court order, deceased patient files, sensitive behavioral health archives. Watch every box go through the industrial shredder. By appointment. Learn about witnessed shredding.
Hard drive and media destruction. Mechanical crushing meets HIPAA, GLBA and PCI-DSS sanitization standards. $9 per drive, $79 minimum job.
Massachusetts Retention Rules
Destruction follows retention. These are the Massachusetts minimums for common medical record categories.
Adult medical records: 7 years from last patient encounter, state minimum.
Pediatric medical records: 7 years past last encounter or until age 25, whichever is later.
HIPAA documentation (BAAs, training logs, breach assessments): 6 years from creation or last effective date.
Billing and claims records: 7 years for tax and Medicare audit purposes.
Controlled substance records: 2 years federal minimum, often retained 7 years.
Behavioral health records: 30 years for inpatient mental health, 10 years standard outpatient.
Pricing for Medical Practices
Same per-pound pricing as commercial accounts. No HIPAA surcharge.
- Drop-off at our Tewksbury facility: 99 cents per pound, no minimum
- Off-site pickup: 99 cents per pound plus transportation from $129 (zone based)
- Scheduled console service: from $195 per month
- Witnessed shredding: 99 cents per pound plus per-trip fee
- Hard drive crushing: $9 per drive, $79 minimum
- HIPAA compliance fee: $14.95 flat per job
- Environmental fee: $19.95 flat per job
Box pricing alternative for purge jobs of 10 boxes or more: $15 per banker’s box or $20 per file box, whichever total is lower.
Frequently Asked Questions
Do you sign a Business Associate Agreement?
Yes. We sign a HIPAA Business Associate Agreement before your first pickup at no charge. The BAA covers permitted uses, breach notification within 60 days, subcontractor obligations, security safeguards and termination procedures. We provide a template aligned with HHS Office for Civil Rights guidance, and we can review your existing BAA template if your compliance officer prefers your contract language.
How quickly do I receive the Certificate of Destruction?
Within 24 hours of pickup, emailed to the contact you designate. The Certificate lists pickup date, weight or piece count, destruction method, BAA reference and witness signature. OCR auditors and malpractice carriers accept this as evidence of HIPAA compliant disposal.
Are dental X-rays handled differently?
Yes. Film-based X-rays contain silver halide and require specialized destruction. We handle dental X-rays under the same BAA at a separate per-pound rate. Digital X-ray hard drives are crushed at the standard media destruction rate.
What if I am closing my practice?
Practice closures, retirement and physician death create one of the highest risk scenarios for HIPAA breach. Patient records must be retained for the full retention period even after closure, then destroyed under continued BAA coverage. We provide closure-specific service that includes long-term storage handoff, retention tracking and scheduled destruction by year of last encounter.
Do you serve dental practices?
Yes. Dental practices have the same HIPAA obligations as medical practices, plus state board record retention rules. We serve general dentistry, orthodontics, oral surgery, periodontics and pediatric dental practices across Metro Boston.
What cities do you cover for medical shredding?
Andover, Lowell, Lexington, Boston, Burlington, Tewksbury, Wilmington, Waltham, Newton, Lawrence, Haverhill, Methuen, Billerica and Fitchburg are our core service area. We also serve surrounding communities by request.
Related Medical Compliance Resources
Browse our companion guides for healthcare compliance teams.
Schedule HIPAA Compliant Pickup for Your Practice
Call (978) 636-0301 for medical practice pricing and BAA setup. We respond same business day.
