By the Riverd Editorial Team. Last updated: 2026-08-20.
Client records retention is one of those questions that sounds like it should have a single clean answer and does not. How long you must keep SOAP notes, intake forms, and consent records as a solo massage therapist depends on where you practice, what kind of record it is, and sometimes on the client's age, and getting it wrong cuts both ways: keep too little and you are exposed if a question ever arises, keep everything forever and you carry needless privacy risk. This is a plain-English guide to the categories that matter and a safe default posture, without pretending the rules are simpler than they are.
A note up front, because this is exactly the kind of topic where vague confidence is dangerous. The guidance below is informational and is not legal advice. Retention requirements are set by your state and sometimes by federal rules, they change, and the only authoritative answer for your practice comes from your own state licensing board. Treat what follows as a map for asking the right questions, not as a number to copy.
Why retention rules exist and who sets them
Retention rules exist to serve two parties at once: the client, whose health history deserves to be preserved and protected, and you, whose notes are the contemporaneous record of the care you provided if a complaint, audit, or insurance question ever arises. A good record outlives the session because its whole value is being there later, when memory is not.
Who sets the clock is the part that surprises people. There is no single national massage-therapy retention rule. The strongest authority for most practitioners is the state massage therapy board or health department, which sets minimum retention periods for licensees. On top of that, if you handle protected health information in a way that brings you under federal rules, the U.S. Department of Health and Human Services HIPAA requirements impose their own documentation and retention obligations, and professional bodies such as the American Massage Therapy Association publish guidance worth reading. The practical takeaway is that your retention period is whichever applicable rule is longest, so you have to know which rules apply to you before you can set a policy.
The records you keep and the typical clocks
Not all records are the same, and lumping them together leads to either over-keeping or under-keeping. It helps to think in categories. Clinical records, your SOAP notes and assessment of each session, are the core and generally carry the longest retention expectations. Intake and health-history forms sit alongside them. Consent records, including consent to treatment and any consent to charge a saved card, are their own category and worth keeping as long as the relationship and any dispute window could run. Financial records, your payment and tax documentation, follow tax-record rules that are often a separate and shorter clock.
The actual number of years attached to each varies by jurisdiction, which is why this guide will not hand you one. What is consistent is the relative shape: clinical records are kept longest, and records for minors are frequently held longer still, often for a period that runs past the client reaching adulthood. Because the specifics differ so much, the safe move is to find your state board's stated minimum for clinical records and treat that as your floor, then keep financial records for whatever your tax guidance requires. Do not assume a number you read for another state, or another profession, applies to you.
State variation: why there is no single number
If you have searched for a straight answer and come away frustrated, that is the rules working as designed, not you missing something. Massage therapy is licensed at the state level, so retention minimums are written into state regulation and genuinely differ from one another. A period that is correct in one state can be too short in the next. Add the possibility of federal HIPAA obligations layered on top for some practitioners, and a single national number becomes impossible to state honestly.
This is precisely the kind of legally nuanced area where oversimplifying does real harm, so the responsible answer is to point you to the authoritative source rather than invent a figure. Look up your specific state massage therapy board, find its record-retention provision for licensees, and note both the minimum period and any special rule for minors. If you also meet the criteria that bring you under HIPAA, check those obligations too. When the rules genuinely conflict or are unclear, that is the signal to ask a professional who knows your state, not to guess. A short consultation is far cheaper than a retention mistake.
A safe default system for a solo practice
While you confirm the exact periods, you can build a system whose habits are sound regardless of the precise numbers, and a good default leans toward keeping clinical records securely for a long period rather than purging early. The cost of holding a well-protected record a little longer is low; the cost of having destroyed one you needed is not.
Three habits cover most of the ground. First, keep clinical records, intake forms, and consent records together per client, securely stored and access-controlled, for at least your state board's stated minimum, longer for minors. Second, store them somewhere durable and private rather than a loose folder of paper or an unprotected device, so retention and security are solved by the same choice. Third, when a record genuinely reaches the end of its required life and you choose to dispose of it, do so securely, because a discarded health record is a privacy exposure. Keeping notes in a system where each client's history lives in one protected place, like Riverd's provider-private security and privacy model, makes all three habits the default rather than a chore. For the related federal picture, see our guide to HIPAA for solo massage therapists, and browse our compliance hub for more. This is general information, not legal advice; confirm your obligations with your state board.
Key Takeaways
- There is no single national retention number for massage therapists. Your state licensing board sets the minimum, and federal HIPAA rules may apply on top for some practitioners.
- Think in categories: clinical records and intake forms are kept longest, consent records run as long as a dispute could, and financial records follow separate tax-record rules.
- Records for minors are frequently held longer than for adults, often past the client reaching adulthood. Use your state board's clinical-record minimum as your floor.
- A safe default leans toward keeping well-protected clinical records for a long period, storing them durably and privately, and disposing of expired records securely.
