Telehealth compliance, in plain English
Caracola Medical is a physician-led, white-label telehealth medical group. This page explains how our physician-owned structure, independent clinical judgment and HIPAA-compliant workflows support telehealth compliance for the brands and clinics we work with. Founded by J. Chance Miller, MD and Stephanie Miller.
Last reviewed October 11, 2026 · Reviewed by J. Chance Miller, MD
Why a physician-owned medical group matters
Clinical services are delivered through a physician-owned professional entity; business operations are provided by a separate management company. That matters because many states follow the corporate practice of medicine doctrine, which limits who may own a medical practice or control medical decisions.
In those states, a company owned by non-physicians generally cannot practice medicine itself or direct how physicians treat patients. A physician-owned clinical entity keeps the practice of medicine where state law expects it: with licensed clinicians. Your brand runs the business. Our medical group provides the care, as in our white-label telehealth model.
Independent clinical judgment
Every clinical decision is made by a licensed clinician using independent judgment. That includes whether to treat, what to prescribe and when to refer or escalate.
A partner's marketing, conversion goals or revenue targets never decide a clinical outcome. A clinician can decline to treat, change a plan or refer a patient elsewhere, and that decision stands. Protocols guide care. They do not replace the clinician's judgment about the patient in front of them.
How business support stays separate from clinical decisions
Business support and clinical decisions run in separate lanes. Partners and our back-end support team handle scheduling, intake operations, billing operations, platform setup and patient support. Licensed clinicians control diagnosis, treatment and clinical protocols.
We structure each relationship with state corporate-practice and fee-splitting rules in mind. In general, that means fees for business operations support reflect the services actually provided, and are not tied to referrals or set as a share of professional fees in ways a state prohibits. The details depend on the states involved, and your own counsel should review them.
HIPAA-compliant workflows
We run HIPAA-compliant workflows, and we put the HIPAA agreements the relationship requires in place before launch. Patient information is seen only by the people who need it for their role.
- Access to patient records limited to what each role needs
- Clinical communication kept inside the platform, not in personal email or text
- Clear handling for records requests, corrections and suspected incidents
- Partner staff trained on where clinical information may and may not go
Our founder has watched escalations get split across email threads on other platforms. It is slow for patients and a privacy risk. We design workflows so that does not happen.
State-by-state practice rules
Telehealth is governed by the rules of the state where the patient is located at the time of the visit. We build protocols around the rules in each state you serve.
- Licensure: the treating clinician must be licensed in the patient's state.
- Synchronous and asynchronous care: some states require a live video or audio visit before certain treatment. Others allow asynchronous care in some situations.
- Prescribing: rules for establishing a clinician-patient relationship and prescribing vary by state and by medication.
- NP and PA practice: scope, collaboration and supervision rules differ. See our collaborating physician and medical director services.
When you add a state, we review its rules before any patient there is seen. Unfamiliar terms are defined in our telehealth glossary.
Informed consent and clinician disclosures
Patients give informed consent before care begins, and they receive the clinician disclosures their state requires. Patients interact with your brand, and the required information about who is providing their care is still given as state law requires.
Consent language covers the nature of telehealth, its limits and what to do in an emergency. We review it for each service line and state.
Documentation and chart standards
Every visit is documented to one consistent standard, written to hold up if a state board or payer reviews it. Good charts protect patients, clinicians and your brand.
- Intake and history reviewed by the clinician, not just collected
- Clinical reasoning for the decision, including when treatment is declined
- Consent and required disclosures recorded
- Plan, follow-up and escalation notes in one place
What we don't do
We don't sell software, and we don't give legal advice. That keeps our role clear.
- We don't sell a platform, so our advice on tools is not tied to a product.
- We aren't your lawyers. Every partner should have its own healthcare counsel review its structure, agreements and marketing.
- We don't let business goals override clinical decisions.
This page is general information about how we approach compliance. It is not legal advice. Laws change and vary by state, so confirm your obligations with your own counsel.
Frequently asked questions
What is the corporate practice of medicine?
It is a legal doctrine, followed in many states, that limits non-physicians and lay companies from practicing medicine or controlling medical decisions. The details vary by state.
Why does a physician-owned medical group matter for telehealth compliance?
It means a licensed physician owns the clinical entity that employs or contracts the clinicians and sets clinical policy. That keeps clinical control with clinicians, which many state rules expect.
Can a partner influence clinical decisions?
No. Partners can shape the brand, the patient experience and business operations. Diagnosis, treatment and prescribing decisions belong to licensed clinicians using independent clinical judgment.
Do you put HIPAA agreements in place with partners?
Yes. We put the HIPAA agreements the relationship requires in place before launch, and we run HIPAA-compliant workflows from day one.
Does a clinician need a license in the patient's state?
Generally, yes. Telehealth follows the rules of the state where the patient is located, so the treating clinician must hold a license there or fall under a recognized exception.
Do you give legal advice on telehealth compliance?
No. We share how we operate and what we have learned from the clinical side. Partners should rely on their own counsel for legal advice. To talk through your setup, request a discovery call, or see our partner FAQ.
Let’s build your care program.
A 30-minute discovery call is the fastest way to see if we’re a fit.