Payment gateways for therapists like Ivy Pay and SimplePractice provide HIPAA-compliant payment processing, ensuring client data remains secure while integrating with electronic health records.
Running a private practice involves more than just clinical work. You also have to handle the administrative side, and getting paid is a big part of that. Clients expect convenient ways to pay for sessions, often using credit cards or HSA cards. But you cannot just use any app you find on the app store. You handle sensitive health information, so your tools must meet strict standards.
Finding the right payment processor protects your license and your clients. It also keeps your bookkeeping organized. The wrong choice could lead to compliance issues or high fees that eat into your earnings. This guide breaks down safe, efficient options that fit the specific needs of mental health professionals.
Payment Gateways for Therapists With Security
Mental health professionals face unique challenges when accepting payments. Unlike a coffee shop or a retail store, you possess confidential data that requires protection under federal law. A standard peer-to-peer payment app might broadcast transactions publicly or lack the necessary encryption logs. Using these general tools can put you at risk of violating patient privacy rules.
Specialized payment gateways for therapists solve this problem. They sign a Business Associate Agreement (BAA), which legally binds them to protect patient data. They also mask bank statement descriptors so that a client’s privacy remains intact even on their credit card bill. These features are non-negotiable for a compliant practice.
| Gateway Name | Transaction Fee | Best Use Case |
|---|---|---|
| Ivy Pay | 2.75% per charge | Therapists wanting a standalone mobile app |
| SimplePractice | 3.15% + $0.30 | All-in-one EHR management |
| Square | 2.6% + $0.10 (Card present) | Practices taking in-person payments |
| Stripe | 2.9% + $0.30 | Custom website integration |
| TheraNest | 3.0% + $0.30 (approx) | Mid-sized group practices |
| PayPal (Business) | Variable rates | General business needs (requires config) |
| Zelle (Business) | Free (mostly) | Bank-to-bank transfers (Check terms) |
Essential Features To Look For
Not all payment processors work the same way. When you evaluate a service, you need to look beyond the flashy marketing and check the technical details. The right features save you time on admin tasks and reduce the stress of liability.
HIPAA Compliance And The BAA
The most critical feature is the Business Associate Agreement. If a payment processor refuses to sign a BAA, you should probably look elsewhere. While the payment transaction itself falls under financial regulations, any receipt, invoice, or storage of data that links a name to a medical service must comply with the HIPAA Security Rule. Specialized services design their systems to handle this data correctly.
Integration With EHR Systems
Efficiency matters. If you use an Electronic Health Record (EHR) system to schedule clients and take notes, having an integrated payment system helps. It allows you to charge a card immediately after a session without opening a separate app. This connection reduces data entry errors and keeps your financial records automatically synced with your client files.
FSA And HSA Acceptance
Many clients pay for therapy using Flexible Spending Accounts (FSA) or Health Savings Accounts (HSA). These cards function like credit cards but have restrictions on what they can purchase. A payment gateway correctly coded as “Medical Services” or “Health Practitioners” ensures these transactions go through smoothly. General payment terminals might get declined if they are categorized under “Personal Services” or “Retail.”
Review Of Leading Gateways
Let’s examine the most popular tools available. Each has strengths depending on whether you run a solo practice, a group clinic, or a telehealth service.
Ivy Pay
Ivy Pay was built exclusively for therapists. It operates as a mobile app where you enter the client’s card information once, and the app tokenizes it for future use. The design is simple and removes the clinical feel of a medical transaction. You don’t need a card reader; you just use your phone. The service charges the card on file, so you never have to ask for payment at the end of a session.
This service signs a BAA automatically. The charge on the client’s statement appears as a generic “Ivy Labs” or similar non-descript name, adding a layer of privacy. It is an excellent choice if you use paper notes or a basic EHR that lacks payment features.
SimplePractice
SimplePractice offers a robust practice management suite. Their payment processing is built-in (powered by Stripe). The main advantage here is automation. You can set the system to charge the client’s card overnight after an appointment. It also generates superbills and invoices instantly.
While the fees might be slightly higher than a bare-bones processor, the time saved on administrative work often justifies the cost. You get a single dashboard for scheduling, notes, and billing. This unification reduces the mental load of switching between different software platforms.
Stripe
Stripe is a developer-friendly platform that powers many other apps, but you can use it directly. It is highly customizable and integrates with almost any website builder. If you sell courses, books, or coaching packages alongside therapy, Stripe handles diverse product types well.
Stripe will sign a BAA if you request it, but usually for enterprise accounts or specific setups. However, standard payment processing is often exempt from HIPAA if no health data is stored with the processor. You need to be careful about what data you enter into the description fields. Stick to “Consultation” rather than “Psychotherapy for Anxiety” to be safe.
Square
Square is famous for its white card readers. It is very easy to set up and great for in-person transactions. They offer a HIPAA-compliant version if you upgrade to their paid plans or specific setups. Square keeps compliant by disabling certain features like saving client notes in the receipt field.
It is a solid backup option or a primary choice if you see clients face-to-face and they prefer to dip or tap their cards. The funds transfer to your bank account quickly, which helps with cash flow.
Costs And Financial Reporting
Fees add up. Most processors charge a percentage of the transaction plus a small fixed fee. For example, 2.9% plus 30 cents. On a $150 session, that is roughly $4.65. Over a year, this totals thousands of dollars. You must factor this into your rate setting.
Understanding The 1099-K
At the end of the year, your payment processor might send you a tax form called the 1099-K. This form reports the gross volume of transactions processed. New rules have lowered the reporting threshold in many states, so you are more likely to receive one now than in the past.
It is worth noting that you usually do not need to file extra paperwork for these specific incoming transfers yourself, as 1099s are not required for credit card payments processed by third-party settlement organizations. The processor handles the reporting to the IRS. You just need to verify the numbers against your own bank records to ensure accurate income reporting.
ACH Transfers As An Alternative
Credit card fees can feel heavy. ACH transfers offer a cheaper alternative. This is a direct bank-to-bank transfer. Fees for ACH are often capped (e.g., max $5) or are a much lower percentage (like 1%). It takes a few days longer for the money to arrive, but for a stable practice with regular weekly clients, the savings are significant.
Security Concerns And Data Safety
Your clients trust you with their deepest secrets. That trust extends to how you handle their financial data. A breach in your payment system can be devastating. Following the PCI data security standards is mandatory for anyone accepting cards. Fortunately, modern payment gateways handle the heavy lifting of PCI compliance.
They use tokenization. This means the actual credit card number is never stored on your phone or computer. It is replaced by a secure code (token). Even if your computer is hacked, the thief only gets useless tokens, not real card numbers. Always enable two-factor authentication on your payment apps to add an extra lock on the door.
| Payment Method | Fee Rate (Est.) | Annual Cost |
|---|---|---|
| Cash / Check | 0% | $0 |
| Ivy Pay | 2.75% | ~$4,290 |
| Stripe / Square | ~2.9% + $0.30 | ~$4,836 |
| Premium EHR Bundle | ~3.15% + $0.30 | ~$5,226 |
Choosing The Right Option
The best payment gateway for you depends on your workflow. If you are tech-savvy and want full control, Stripe is powerful. If you want a “set it and forget it” solution that handles notes and billing together, SimplePractice or TheraNest is worth the higher fee. For those who want a simple, HIPAA-safe way to charge a card without a card reader, Ivy Pay is the top contender.
You can also mix methods. Many therapists keep a card on file for late cancellations but accept checks or Zelle (business version) for regular sessions to save on fees. Just make sure whatever method you choose maintains the professional boundary and privacy your clients deserve.
Review your statements monthly. Watch for hidden monthly compliance fees or statement fees that some older merchant account providers charge. The modern app-based gateways listed here usually avoid those “junk fees,” making them more transparent for small business owners.