The short answer
A medical courier worth trusting with protected health information should be able to show you four things before a single specimen moves: documented privacy and handling training for every driver who will touch your work, a willingness to sign a business associate agreement, a written chain-of-custody procedure with signatures at every handoff, and specimen-handling practices that match your lab's protocols — including temperature control. If a courier hesitates on any of the four, keep looking.
That's the whole test. The rest of this article unpacks each requirement — what it looks like in practice, what questions surface a weak answer, and the red flags that should end a conversation early. This is practical vetting guidance from a courier's side of the counter, not legal advice; your compliance officer gets the final word.
"HIPAA-compliant" is a claim — make them prove it
Anyone can put the phrase on a website, and plenty of delivery companies do. There is no badge or certificate a courier can wave that settles the question, which means the burden is on you to verify what's actually behind the claim. In practice, a courier handling PHI on your behalf is acting as your business associate, and the practical substance of compliance lives in three places: who the drivers are and how they're trained, what paperwork the company will sign, and what its handling procedures look like when a run goes sideways.
The good news is that verification is fast. Every requirement below can be checked in a single phone call or a one-page document request. A courier that does real medical work will have crisp answers because it fields these questions constantly. Vague answers are themselves the data point.
Driver training: know who is actually carrying your specimens
Start with the most basic question, because it's the one that most often produces an uncomfortable pause: who employs the drivers? A courier running its own employed drivers can train them, supervise them, discipline them, and put the same people on your route week after week. A courier that quietly subcontracts to gig platforms or day-rate independents can promise none of that — and with PHI in the vehicle, that difference is the whole conversation.
Then ask what the training covers. At minimum you want drivers trained in patient-privacy practices — what PHI is, why a specimen bag never rides unattended or gets discussed — plus proper specimen handling, packaging awareness, and basic spill and exposure response. Ask how training is documented and refreshed. At Deadline Delivery, drivers assigned to medical work complete this training before they take a single healthcare run, and the roster is consistent: your sites see the same faces, which is itself a compliance asset, because a driver who knows your lab knows your procedures.
The BAA: the piece of paper that makes it real
A business associate agreement is the contract that binds a courier to safeguard the PHI it handles on your behalf, and asking for one is the fastest single test of whether you're talking to a real medical courier. A company that does genuine healthcare work signs BAAs as a matter of routine and won't blink at the request. A company that hesitates, asks what a BAA is, or tells you it isn't necessary has just answered a much bigger question for you.
This is also where gig-economy delivery apps quietly disqualify themselves. The platform typically won't sign a BAA covering its drivers, the drivers aren't the platform's employees, and nobody in the chain is accountable for training or handling. Whatever the per-delivery price looks like, an unsigned BAA and an untrained stranger is not a bargain a lab compliance program can defend.
Chain of custody: documented at every handoff
Chain of custody sounds bureaucratic until the day a specimen is questioned — then it's the only thing that matters. Require a written procedure: signature and time stamp at pickup, a documented handoff at delivery, and a record you can retrieve later. Ask to see what the proof-of-delivery actually looks like. Then ask the harder question: what happens when a run is interrupted — a vehicle problem, a closed dock, a recipient who isn't there? The answer should involve dispatch, documentation, and a phone call to you, not improvisation.
One more question separates professionals from pretenders: what happens at 2 a.m.? Medical logistics doesn't keep business hours, and a courier without staffed around-the-clock dispatch has no answer when a STAT run fails on a Saturday night. Ask who picks up the phone. Our answer has been the same since 1988 — a live dispatcher, every hour of every day.
Specimen handling and temperature control
Specimens generally travel in one of three states — ambient, refrigerated, or frozen — and your courier should handle all three the way your lab specifies, not the way the driver finds convenient. That means validated coolers and packing materials, adherence to the packaging protocol your lab or pharmacy defines, and drivers who understand that a specimen's stability window is a hard limit, not a suggestion. The courier's job is to protect the integrity of what's in the container and hit the window; your lab's job is to define the protocol. Be wary of any courier that wants to improvise the science.
Ask specifically how temperature-sensitive material is staged between stops on a routed run, and how long a specimen sits in a vehicle in August. A courier that runs real lab routes will have thought about both questions long before you asked.
STAT vs. routed: getting the economics right
Medical courier work comes in two flavors, and the pricing difference between them is large. A STAT run is a dedicated vehicle dispatched immediately, point to point — the right call for time-critical and short-stability material, and priced accordingly. A scheduled route is a planned daily or multi-daily sweep of your draw sites or clinics, priced per route rather than per trip, and dramatically cheaper per specimen.
The mark of a good medical courier is that it helps you split your volume honestly between the two instead of selling you STAT pricing for routine work. Most practices and labs discover that the bulk of their volume fits a scheduled route, with STAT reserved for the genuine exceptions — and that this split, more than any per-trip discount, is what brings the monthly courier bill down.
Red flags, and a checklist you can use this week
The red flags are the mirror image of everything above: a courier that can't say who employs its drivers, won't sign a BAA, has no written chain-of-custody procedure, can't describe its temperature-control practice, has no after-hours dispatch, or answers hard questions with reassurances instead of specifics. Any one of these is disqualifying for PHI. Price doesn't rescue them.
So here's the one-call vetting script: Who employs your drivers, and what training do they complete? Will you sign our BAA? Show me your chain-of-custody documentation. How do you handle refrigerated and frozen material? Who answers at 2 a.m.? Ask us these questions — we've been answering them for healthcare clients across Eastern Massachusetts for decades, and any courier that wants your specimens should be glad to answer them too.
Common questions
Does a medical courier need to sign a BAA?
If a courier is handling protected health information on your behalf, a business associate agreement is the standard expectation — it's the document that binds the courier to safeguard PHI. A courier that does real healthcare work signs them routinely; we do. Confirm specifics with your compliance officer.
Are gig-app drivers ever appropriate for lab specimens?
We'd say no, and not because they're competitors: the platforms typically won't sign a BAA, the drivers aren't trained in privacy or specimen handling, and nobody in the chain is accountable when something goes wrong. PHI belongs with trained, employed, accountable drivers.
What temperature control should a courier offer?
Ambient, refrigerated, and frozen transport, using validated coolers and the packaging protocol your lab or pharmacy specifies. The courier protects the container and hits the window; your lab defines the science.