How do telehealth providers verify which state a patient is in?
Last reviewed 20 October 2026
Most ask the patient, because the clinician must be licensed where the patient is at the time of the visit; a device-measured check that returns a yes or no for the state, without collecting the patient’s coordinates, gives the provider evidence rather than a self-report.
The rule
Medical licensing in the United States is state by state, and for telehealth the location that counts is the patient’s. The Federation of State Medical Boards puts it this way in its model policy:
The practice of medicine occurs where the patient is located at the time that telemedicine technologies are used.
It adds that “a physician must be licensed, or appropriately authorized, by the medical board of the state where the patient is located,” with narrow exceptions such as follow-up care. State rules vary, and interstate compacts change who may practise where.
How it is checked today
Usually by asking. The patient confirms their state at booking or at the start of the call, and the clinician notes it. That works when everyone is honest and accurate. It fails when a patient is travelling, near a border, or answers the way they think will get them seen.
Because the licence depends on where the patient is, the visit record should show where the patient was.
A check that fits healthcare
- Ask the question the rule asks: is the patient in a state where this clinician is licensed?
- Keep the coordinates off your servers. A patient’s precise location is sensitive data. A signed yes or no for the state is far less to hold. See verifying location without collecting it.
- Run it at the start of the visit, inside the provider’s app, and keep the proof with the visit record.
Nothing here is legal or clinical advice. Licensing rules differ by state and profession.
A verdict answers for a device, not a person. It says an enrolled device was inside or outside a region at a time. It does not say who was holding it. Use it alongside identity verification, never instead of it. It does raise the cost of cheating: instead of a VPN subscription, a cheater needs real devices and a person in the permitted place for every transaction.
- What is geolocation compliance?
- How do you verify location without collecting it?
- What counts as precise geolocation under privacy law?
- What is jurisdictional eligibility?
- What is proof of location?
- Frontier AI access is a location problem. 28 Sep 2026
- Age verification is a location problem. 23 Sep 2026
- Cryptographic proof of location. 6 Aug 2026
- Octet is live. 25 Jun 2026