Outsourcing NEMT dispatch or phones: costs, control, and HIPAA

Two different jobs get called outsourcing

Outsourcing the phones and outsourcing dispatch are separate decisions with different costs and risks. An answering service picks up calls you cannot take and follows a script. A remote dispatcher works inside your operation: they assign trips, talk to drivers, and handle broker portals.

An answering service for nights and weekends covers the phone without letting an outsider change the schedule. Handing over the dispatch board is a much bigger step. Our guide to after-hours coverage covers the in-house alternative.

The usual reason to outsource is the owner’s time. In a small company the owner often dispatches, answers the phone, and chases broker trips, which leaves little room for selling to facilities or fixing the business. Some remote firms sell billing and credentialing seats as well, including the NEMT firm in the price table below. Treat each one as a separate decision with its own agreement, because each hands an outsider a different set of rider records.

What it costs

The rates below are the posted prices of three services as of September 2026. Treat them as examples of how each model works, not as quotes.

Compare those prices with hiring. For the dispatcher occupation that excludes police, fire, and ambulance, O*NET lists a 2025 national median wage of $50,340 a year ($24.20 per hour). Payroll taxes, workers’ compensation, and benefits come on top. Coverage hours matter more than the rate. One seat staffed every hour of the week is 168 hours, the same as 4.2 full-time jobs at 40 hours each.

Here is an example. A small fleet gets about 150 calls a month outside office hours, averaging 3 minutes each, or 450 minutes. On the per-minute plans above, the 500-minute plan costs $1,725. On the per-call plans, 90 included calls plus 60 extra calls at $10.50 comes to $1,440. Either way, after-hours phone coverage costs well under the pay of a second full-time dispatcher. It still does not put anyone on the dispatch board.

Our guide to hiring a NEMT dispatcher covers the in-house side of that math.

What you give up

Outsourcing moves the work, not the responsibility. The broker contract is with your company, and your scorecard counts every late trip, turnback, and complaint no matter who handled it. MTM’s Rhode Island handbook (updated July 2026) grades providers on timeliness, complaints, vendor no-shows, turnbacks, and incorrect or missing information. Falling behind can put you on an improvement plan, cost you liquidated damages, or end your place in the network.

The rules an outside dispatcher must follow are strict:

• Turnbacks. MTM’s Rhode Island handbook bars turnbacks on same-day trips, wants any other turnback done a full day ahead of the appointment, and never allows returning a trip claimed from its marketplace. An outside dispatcher who grabs marketplace trips you cannot cover leaves you with trips you cannot return.
• Incident reporting. The same handbook wants MTM called right away about accidents and incidents involving injury or safety, with a written report within 24 hours, and sets a $500 liquidation for failing to meet its incident reporting requirements.
• A reachable manager. Louisiana’s Medi Trans manual (revised February 2025) wants a direct line to a manager at each provider’s dispatch center. The broker expects to reach someone who can make decisions for your company.

You also give up local knowledge that is hard to write down: which hospital door a stretcher crew uses, which driver a nervous rider trusts, which dialysis center always runs late on Fridays. A remote dispatcher learns some of it. Your team already has it.

HIPAA: the agreement and where the work happens

Any outside firm that handles rider details for you is a business associate under HIPAA. The definition in 45 CFR 160.103 reaches anyone who creates, receives, maintains, or transmits rider health information on a covered entity’s behalf, and it extends to subcontractors working for a business associate. That matters in NEMT, because a provider that runs trips for a broker or health plan may itself be their business associate. Then the outside firm counts as your subcontractor. Before it touches rider data, 45 CFR 164.502(e) has you obtain satisfactory assurances, in a written contract, that it will protect that data. Our HIPAA guide for NEMT explains which role your company holds.

Federal rules spell out what the agreement contains (45 CFR 164.504(e)). Among other terms, it has to:

1. Limit how the firm may use and disclose rider information
2. Require safeguards, including Security Rule compliance for electronic data
3. Require the firm to report misuse and breaches to you
4. Bind the firm’s own subcontractors to the same restrictions
5. Have the data returned or destroyed at the end of the contract, where feasible
6. Let you end the contract if the firm violates a material term

Match the breach clock to your broker’s. Under 45 CFR 164.410, a business associate has as long as 60 calendar days from discovering a breach to notify. Broker contracts can be far shorter. CareOregon’s provider manual (February 2024) requires providers to report suspicious activity or a breach of member information to the brokerage immediately, and no later than 24 hours. If your vendor can take 60 days to tell you, you cannot meet a 24-hour rule. Write the shorter deadline into the vendor agreement.

Ask where the people work. Modivcare’s 2025 compliance attestation has transportation providers certify that they do not engage in offshore operations. That includes receiving, viewing, processing, storing, or accessing protected health information outside the United States. Get a written answer on where every agent works before anyone logs in to a broker trip.

Give every outside person their own login. The Security Rule’s access control standard requires a unique name or number to identify and track each user (45 CFR 164.312(a)). A shared owner login breaks that rule and wipes out your record of who changed a trip. It also hands out your broker portal’s two-step codes. MTM’s portal sends a six-digit code by text or email at sign-in.

Signs you should keep dispatch in-house

Outsourcing fits best for narrow jobs: overflow calls, nights and weekends, or temporary cover while you hire. Keep the dispatch board in-house, or bring it back, when:

• Most calls need judgment. Same-day changes, will-calls, and discharges need someone who knows your drivers and vehicles.
• Your trips are mostly wheelchair and stretcher work. Matching level of service, securement time, and crew size depends on details a remote dispatcher may not know.
• Your scorecard slipped after you outsourced. Compare timeliness, turnbacks, and complaints for the 90 days before and after.
• The firm will not sign your terms. No business associate agreement, no breach deadline that matches your broker, or no written answer on where agents work is a hard stop.
• You cannot see the work. If you cannot review call logs and an activity record of trip changes, you cannot manage the firm.
• You are growing into full-time dispatch. Once the board needs a person most hours, a hire who learns your riders and drivers builds knowledge an outside seat takes with it when the contract ends.

If you do outsource, set it up tightly

1. Write the scope. Which calls the firm takes, which decisions it may make, and what it must escalate to you.
2. Sign the business associate agreement first, with a breach notice deadline at least as short as your strictest broker’s.
3. Get agent locations in writing, and check them against every broker contract.
4. Create individual logins with limited roles in your dispatch software. Ask each broker how to add users.
5. Hand over scripts and an escalation list, including after-hours numbers for your managers and each broker.
6. Review the work weekly. Read call logs, spot-check trip changes, and compare scorecard measures.
7. Plan the exit. The agreement should say how rider data comes back or is destroyed when you part ways.

If phones are the only problem, a cleaner dispatch workflow or reminder texts that cut routine calls may solve it without an outside firm. Billing is a separate outsourcing decision, covered in our guide to NEMT billing services.

Keeping control in HealthRide

HealthRide is HIPAA compliant, and we sign business associate agreements with our providers. If you bring in an outside dispatcher, give them their own sign-in in the provider portal. Each person sees only what their role allows, sign-ins can use passkeys or two-step codes, and every change is recorded, so the activity record shows what happened and who did it.