The healthcare MSP vs general MSP question has a shorter answer than most agencies expect: a home care, home health, or home hospice agency needs a provider built around field shifts, and only some of those agencies also need one built around HIPAA scope. In this guide, “MSP” means a managed IT service provider, not a healthcare staffing MSP program.
Across the San Francisco Bay Area, agencies weighing the two usually frame it as a compliance decision. It is mostly an operations decision. Two misfits show up over and over with general providers, neither has anything to do with HIPAA, and the segment an agency sits in decides whether compliance scope belongs on the list at all.
Why Is a General MSP Built Around an Office?
A general MSP is built around the business most of its clients run: office hours, desk-based users, and a help desk that assumes the person calling is sitting at a workstation. That is a reasonable model for a law firm or a construction office. It is the wrong shape for an agency whose staff spend the day in other people’s homes.
Home-based care runs on field shifts. Visits start before 7 AM, coverage stretches across weekends and overnights, and the people doing the work are in client homes rather than at desks. Federal data describes that world precisely. In the Bureau of Labor Statistics Occupational Requirements Survey for 2025, personal care aides had variable work schedules 66.9 percent of the time, had a supervisor present in the immediate work area only 16.5 percent of the time, and were routinely allowed to telework less than 0.5 percent of the time.
That is not a workforce that can walk down the hall to ask IT for help, and it is not one whose problems wait for Monday. Two misfits follow directly from that gap.
Misfit 1: What Happens When Coverage Hours Do Not Match Field Shifts?
When a general MSP’s coverage ends at 5 PM on Friday, every login problem between then and Monday morning goes into a queue. The caregiver still has a visit. The client is still waiting. The ticket sits.
Picture a caregiver locked out of ClearCare at 6 AM on a Saturday. She has a visit at 7, she needs to confirm the address and the care plan, and the app will not let her in. A business-hours provider routes that call to a ticket queue nobody opens until Monday. What actually happens next is that the agency’s scheduler does IT support from her kitchen table, or the visit goes ahead off the record and gets documented from memory that evening. Both outcomes are worse than the lockout itself.
EVV login and credential problems follow the same pattern with higher stakes, because a missed clock-in turns into a billing problem. That subject gets its own treatment later in this series.
Misfit 2: Why Does Desk-Centric Support Miss Field Devices?
A desk-centric support model manages office laptops well and treats mobile as the exception. In home-based care, mobile is the rule. Caregivers and clinicians work from phones and tablets, often personal ones, and the office laptop is the exception.
That inversion changes what “support” means. A provider set up for workstations pushes updates to a fleet of desktops, images a replacement laptop, and closes the ticket. It has no standard answer for a personal iPhone that needs a work profile, an EMR app that will not open after an operating system update, or a tablet that left with a caregiver who stopped answering calls. Our earlier complete guide to mobile device management for home care agencies covers what enrolling those devices gives an agency, and the short version is that a provider without a field-device model cannot deliver most of it.
Healthcare MSP vs General MSP: What Does Each One Actually Solve For?
A healthcare MSP solves for compliance scope. It puts a business associate agreement in place from day one, supports a recurring HIPAA risk analysis, and configures systems with ePHI in mind. Electronic protected health information, or ePHI, is patient data in electronic form, and the HIPAA Security Rule governs how it must be protected. A general MSP solves for keeping an office running. Neither one, by definition, solves for field operations, and that is the problem most agencies actually have.
For home health and home hospice agencies, compliance scope is the right yardstick. Clinicians document visits in Axxess, Homecare Homebase, or WellSky from a phone in the driveway, and claims go out to Medicare and other payers electronically. That means ePHI moves through field devices and through a covered entity’s vendor relationships every day, which is exactly where a general provider tends to have no plan.
So the target for those agencies is a healthcare MSP that also understands field shifts. A healthcare MSP that only understands compliance has solved half the problem, and a general MSP with a longer help-desk shift has solved the other half.
Does Every Home-Based Care Agency Need HIPAA-Scoped IT?
No. Most home care agencies are not HIPAA covered entities, but nearly all home health and home hospice agencies are. Covered-entity status requires electronic transmission of a HIPAA standard transaction, such as an electronic claim, not simply handling health information. A private-pay home care agency that bills its clients directly and never sends a standard transaction usually sits outside the rule.
The exception matters. A home care agency can become a business associate by contract, for example through a referral relationship with a home health agency, a hospice, or a hospital discharge program, where it handles protected health information on the covered entity’s behalf. When that happens, the obligations arrive through the contract rather than through licensure, and they are just as binding.
Here is the correction most generalist content misses. A great deal of it tells every home-based care agency that it needs HIPAA-scoped IT. For a private-pay home care agency with no business associate contract, paying for that scope may buy the wrong thing. The real gap for that agency is almost always field coverage: the 6 AM lockout, the personal phone nobody enrolled. Buying compliance scope it does not need, from a provider that still closes at five, leaves the actual problem untouched.
“When an agency comes to us frustrated with its IT, it’s often because the IT provider understood technology but not the agency’s business. Home care, home health, and home hospice companies are very different than most businesses, which often causes friction.”
Brendan Duebner, President of IT Total Care
Healthcare MSP vs General MSP: How Can an Agency Tell Which It Needs?
Start by placing the agency in its segment, then test the provider against the two misfits. Segment sets the yardstick for compliance scope. The misfit tests show whether the provider fits the way the agency actually runs. Neither step requires a technical background, and both can be done before a single sales call.
Step 1: Place the agency in its segment
An agency is private-pay home care, home health, hospice, or dual-licensed, and the segment decides what the provider has to bring on day one.
- Home health, hospice, and dual-licensed agencies should put a business associate agreement in place before the provider touches any system. Disclosing patient information to a vendor without one is itself the violation, whatever happens afterward, as our post on what a HIPAA business associate agreement for home health agencies has to contain explains.
- Those same agencies need a provider that supports their HIPAA risk analysis without taking the obligation off the agency’s hands, because the obligation cannot be transferred. See what you can’t hand over when outsourcing HIPAA compliance.
- A private-pay home care agency should confirm that no referral or partner contract has made it a business associate before concluding that HIPAA-scoped IT is unnecessary.
In California the dual-licensed case is common. The Department of Public Health licenses home health agencies and the Department of Social Services licenses non-medical Home Care Organizations, and plenty of Peninsula and South Bay operators hold both under one roof. For those agencies the yardstick is set per line of business, not per company.
Step 2: Sort recent IT problems by device
Test Misfit 2 by pulling the last three months of IT problems and sorting them by the device involved. If most of them came from phones and tablets in the field, an office-endpoint support model misses most of the agency’s workload, however good its help desk is on a weekday afternoon.
Then check how the provider manages field devices. Ask whether it enrolls devices in Microsoft Intune, JumpCloud, or Apple Business Manager, and whether that enrollment covers personal phones used for work rather than only agency-owned hardware. A provider that cannot answer in specifics is telling you it has not done it. Our guide on how to set up mobile device management at a home care agency shows what a real answer looks like.
What Have Bay Area Agencies Learned After Switching?
Two agencies have written about this on our site in their own words, and both reached the same conclusion from different starting points: general IT competence is not the same thing as fit for home-based care.
Heart of Humanity, a dual-licensed agency serving Northern California since 1997, describes its first IT partner as a capable, well-reviewed general firm whose support model assumed an office full of workstations. A caregiver who could not clock in through the EVV app at the start of a 7 AM shift simply did not fit that model, and next-business-day response turned out to be unworkable once it met a real schedule. Their account of choosing an IT partner for home care is worth reading in full.
Comfort Keepers of the South Bay and Peninsula landed in a similar place: home care IT is not one-size-fits-all, and support has to cover a mobile workforce, scheduling platforms, and after-hours and weekend needs before anything else counts. Their perspective on evaluating an IT provider for home care agencies covers what they would ask differently now.
How Does IT Total Care Fit Its Support to Home-Based Care?
IT Total Care specializes in home-based care: home care, home health, and hospice agencies. Our coverage is built around caregiver shifts rather than office hours, our device model starts with the phone in the field, and our compliance scope is matched to the agency’s segment instead of applied to everyone.
- Field devices managed as the default: We manage field devices through Microsoft Intune, JumpCloud, and Apple Business Manager, including personal phones enrolled for work.
- One working environment: We support agencies running Axxess, WellSky, KanTime, Homecare Homebase, and ClearCare, and we treat scheduling, EVV, and documentation as one connected environment rather than separate tickets.
- Scope matched to segment: Home health and hospice clients get a business associate agreement and help supporting the agency’s own HIPAA risk analysis, and the obligation stays with the agency, for the reasons laid out in what you can’t hand over when outsourcing HIPAA compliance.
- No HIPAA-scoped services a private-pay agency does not need: We confirm first whether any contract has made the agency a business associate, and we do not add compliance scope where it does not apply.
- Month-to-month agreements: Our agreements are month-to-month giving agencies the flexibility they need.
That is what we mean by IT support built around caregiver shifts.
Where does on-site IT support in the Bay Area fit?
On-site support still matters in field care, even though caregivers work remotely. The office network, the scheduler’s workstation, and device setup for a wave of new hires all happen in person, and none of it is done well from a remote session. IT Total Care is based in Foster City and provides on-site IT support across the Bay Area, including San Francisco, the Peninsula, Oakland and the East Bay, and San Jose and the South Bay. We support field devices remotely and send someone on-site for the office, the network, and hardware swaps.
So Which Provider Does a Home Care Agency Need?
A home care agency needs a provider built for field shifts and field devices. A home health or hospice agency needs that same provider plus compliance scope. The healthcare label alone does not settle it, and neither does the size of the help desk. If your current provider fails either misfit test, the next step is a clean transition, and Wednesday’s guide walks through it step by step.
Ready to Match Your IT Provider to How Your Agency Actually Runs?
IT Total Care works with home care, home health, and home hospice agencies across the San Francisco Bay Area to close the two misfits described here: coverage that follows caregiver shifts and device management that starts with the phone in the field. Learn more about our approach to healthcare IT.
Contact Us to talk through which model fits your agency.
