Selecting a Patient Engagement Vendor Checklist (2026)

TL;DR

Choosing the right patient engagement vendor for your PT, OT, or SLP clinic requires more than a demo and a handshake. This guide defines the key terms you’ll encounter during vendor evaluation, provides a structured checklist organized by seven categories (security, clinical fit, RTM capability, integration, pricing, credibility, and patient experience), and flags the red flags that experienced practitioners have learned to watch for. Print it, bring it to your next vendor call, and score every platform the same way.

Why a Vendor Selection Checklist Matters for Rehab Clinics

A third of healthcare providers wouldn’t recommend their current EHR vendor, according to a Tebra survey. That statistic gets worse when you realize most rehab clinics picked their tools based on a single demo or a colleague’s suggestion, not a structured evaluation.

The cost of getting it wrong compounds quietly. A clinic running an 80% clean claim rate and burning 40% of clinician time on documentation is paying a silent tax every month. Switching costs feel intimidating (data migration, retraining, workflow disruption), but practitioners in online forums consistently report that those costs are overstated relative to the ongoing cost of underperformance.

That is why selecting a patient engagement vendor checklist is not a nice-to-have. It is the difference between a tool your staff actually uses and shelfware that drains your budget. Technology shapes modern PT practice in ways that touch revenue, compliance, and patient outcomes simultaneously. A structured checklist forces you to compare vendors on criteria that matter to rehab, not criteria designed for hospital CIOs.

→ See AC Health’s pricing tiers to benchmark transparent pricing against other vendors you evaluate.

Core Terms You Need to Know Before Evaluating Vendors

These definitions address the concepts that cause the most confusion during the buying process. Each one includes a note on why it matters for your vendor selection checklist.

Patient Engagement Vendor

A software company that sells tools helping providers communicate with, educate, and motivate patients between visits. The category covers patient portals, appointment reminders, secure messaging, education content, mobile health apps, remote monitoring devices, and the care management programs wrapped around them.

Why it matters for selection: Nearly every vendor now claims “AI” and “engagement,” yet the platforms behave very differently in practice. A scheduling reminder tool is not the same as a platform that delivers custom exercise videos with adherence tracking. Define what “patient engagement” means for your clinic before comparing vendors. For rehab, it almost always means HEP delivery, in-app communication, and some form of monitoring.

Business Associate Agreement (BAA)

A BAA is a written contract required before any covered entity discloses protected health information (PHI) to a vendor. It is legally required whenever you work with an external entity that creates, receives, maintains, or transmits PHI on your behalf.

Why it matters for selection: A vendor claiming “HIPAA compliance” without offering to sign a BAA is not actually compliant for your use case. This is the single most common gap in vendor evaluation, and it should be the first item on your checklist. If a vendor hesitates or deflects when you ask for the BAA, end the conversation. Learn more about stopping PHI leaks through SMS to understand why this contract matters in practice.

HIPAA Compliance (In the Vendor Context)

HIPAA compliance is the legal floor. It means the vendor has policies, technical safeguards, and administrative procedures that meet the standards in the HIPAA Security Rule and Privacy Rule. SOC 2 attestation goes further: it tells you the vendor’s internal controls have actually been audited by an independent third party.

Why it matters for selection: Some self-identified “HIPAA-compliant” vendors can protect data at rest but not in transmission, or they require patient waivers to achieve compliance. This quasi-compliance is a real problem. HIPAA penalties range from $141 per unknowing violation up to $2,134,831 per violation for willful neglect. Ask for both the BAA and the SOC 2 report. If either is missing, add a risk line item to your scorecard.

Remote Therapeutic Monitoring (RTM) vs. Remote Patient Monitoring (RPM)

RTM was introduced specifically for musculoskeletal and respiratory therapy conditions. It captures therapeutic activity data: exercise adherence, pain ratings, functional status, and therapy engagement. RPM, by contrast, tracks physiological data like blood pressure and weight.

Why it matters for selection: If a vendor is pitching you an RPM solution for your physical therapy clinic, that is either a mislabeled product or a compliance problem. You want RTM codes. The 2026 Physician Fee Schedule delivered the most significant RTM expansion since the program launched in 2022, adding three new CPT codes (98985, 98984, 98979) that lower billing thresholds. RTM now has eight CPT codes with reimbursement ranging from approximately $22 to $54 per code per month. Your checklist should verify which codes the platform supports and whether it auto-tracks transmission days. For a full breakdown, read the RTM cheat sheet for CPT codes and billing rules.

FDA-Defined Medical Device (Software as a Medical Device)

RTM devices must meet the FDA definition of a medical device, which includes software applications. Digital home exercise platforms and therapy adherence apps can qualify as Software as a Medical Device (SaMD) if they meet specific criteria around intended use and clinical function.

Why it matters for selection: Not every HEP app qualifies for RTM billing. If a vendor claims RTM capability, ask whether their platform meets the FDA’s medical device definition. If it doesn’t, your RTM claims may not survive an audit.

Data Portability and Vendor Lock-In

Data portability refers to your ability to export patient data in standard formats (CSV, PDF, or HL7/FHIR) if you switch vendors. Vendor lock-in happens when proprietary data formats, contract terms, or integration dependencies make it prohibitively expensive to leave.

Why it matters for selection: Before signing any contract, ask explicitly: What data export formats are supported? How is patient data transferred if we switch vendors? If the vendor cannot describe a clear export path, you are heading for lock-in. Vendor inertia is powerful, but it should be a choice, not a trap.

Total Cost of Ownership

Goes beyond the monthly subscription. Includes setup fees, per-user charges, content library add-ons, integration fees, white-label premiums, and revenue-share percentages on RTM billing.

Why it matters for selection: Rehab clinics frequently make one of two opposite pricing errors. They select the cheapest option without evaluating what’s included, or they default to expensive legacy platforms without questioning whether the cost is justified. Choosing a budget option that lacks billing automation or documentation support can produce long-term revenue losses through higher denial rates, manual rework, and clinician overtime. Understanding how patient experience drives revenue helps put these costs in perspective.

Home Exercise Program (HEP) Software

Software that lets clinicians build, assign, and track exercise prescriptions for patients to complete outside the clinic. The major differentiator in this category: does the platform rely on a stock video library, or does it support clinician-recorded custom video?

Why it matters for selection: For rehab, the choice between custom video HEPs and stock exercise libraries is one of the most consequential decisions. Stock libraries are faster to assign but often show exercises that don’t match the specific cues a clinician gave during the visit. Custom video captures exactly what the patient practiced, which improves comprehension and adherence. The tradeoff is that custom video requires recording effort, though some platforms make this a one-tap process during the visit. Compare options like HEP2Go against platforms that prioritize clinician-recorded content.

White-Label App

A vendor-built app that carries your clinic’s branding instead of the vendor’s. Patients see your logo, colors, and name. Under the hood, it is the same platform.

Why it matters for selection: White-labeling strengthens your brand and makes the app feel like an extension of your clinic, not a third-party tool. But evaluate the cost carefully. Some vendors charge thousands for setup plus high monthly fees. Others offer it at lower price points. Ask what’s included: HIPAA messaging, satisfaction surveys, in-app referral features, and content controls all vary.

Patient Activation and Adherence Metrics

Patient activation measures a patient’s knowledge, skill, and confidence in managing their own health. Adherence metrics track whether patients complete prescribed activities (exercises, education modules, check-ins) between visits.

Why it matters for selection: Non-adherence to home exercise programs runs as high as 70%. Only about 35% of physical therapy patients fully complete their prescribed HEPs. Any vendor claiming to improve engagement should show you data proving it. Ask for adherence rates from existing customers, not just feature screenshots. Explore tips to increase patient engagement for evidence-based strategies that complement technology.

The Vendor Selection Checklist: 7 Categories

Use this patient engagement vendor checklist during demos, reference calls, and contract reviews. Score each vendor on a 1-5 scale per item and compare totals.

1. HIPAA and Security

• Does the vendor sign a BAA before any PHI is shared?
• Is data encrypted both in transit and at rest?
• Where is patient data stored? Are servers US-based?
• Does the vendor hold a SOC 2 attestation?
• If the platform uses AI features, ask in writing: is any PHI from support tickets used for model training or fine-tuning? The answer must be an unambiguous no.
• What is the vendor’s breach notification process?

The stakes are high. According to IBM’s 2025 Cost of a Data Breach Report, the average cost of a healthcare data breach is $7.42 million, the highest of any industry for 14 consecutive years.

→ For a sample policy framework, see this HIPAA-compliant texting policy for therapists.

2. Clinical Fit (Rehab-Specific)

• Does the platform include a built-in HEP module, or does it bolt onto a generic EHR?
• Can clinicians record custom video during visits, or is it library-only?
• Does the library include rehab-specific exercises (not just general fitness)?
• Are functional outcome tools integrated (pain scales, PROMs)?
• Can care plans be printed for documentation?
• Does the platform support in-app behavior triggers and adherence nudges?

General-purpose EHR systems often lack specialty-specific features that PT, OT, and SLP practices depend on. Common gaps include missing functional outcome tools, no built-in HEP module, inadequate plan-of-care documentation support, and incomplete rehab billing codes.

3. RTM Capability

• Which CPT codes does the platform support (98975, 98977, 98980, 98981, and the 2026 additions)?
• Does the platform qualify as an FDA-defined medical device for RTM?
• Does it auto-track transmission days?
• Can it generate CMS-1500-ready reports with one click?
• What is the RTM billing model: flat fee or revenue share?

Some vendors take 30 to 50% of RTM reimbursement through revenue-share models. Compare this against flat-fee alternatives. Over a year, the difference can be thousands of dollars per therapist. Read the RTM clinician workflow guide to understand what a good RTM process looks like before evaluating vendor claims.

4. Integration and Data Portability

• Does the platform integrate with your current EHR? Press hard on this, because shallow connections create more manual work, not less.
• Does it support FHIR APIs for payer connectivity?
• Can you export patient data in standard formats (CSV, PDF) if you leave?
• What does the migration process look like if you switch away?

5. Pricing and Contract Terms

• What is the total monthly cost including all add-ons?
• Is there a free trial or permanent free tier to pilot?
• Are there setup fees, per-user charges, or content library surcharges?
• Is the contract month-to-month or does it require multi-year commitment?
• For RTM, is it flat fee or revenue share?
• Does the vendor publish pricing publicly, or do you need a sales call to learn the cost?

→ Compare AC Health’s transparent pricing (plans from $0 to $60/month with no revenue share on RTM) as a benchmark.

6. Vendor Credibility and Support

• How long has the vendor been serving rehab clinics specifically?
• Can they provide reference calls from clinics of similar size and specialty?
• What does onboarding include? Is training free?
• Do you get a dedicated support contact?
• What is the vendor’s product update cadence?

Separate true automation from tools that simply route tasks back to your staff. Ask for proof: certifications, references, and outcomes, not just feature lists. See how real clinics use engagement tools for examples of what effective vendor partnerships look like.

7. Patient Experience and Adoption

• Is the patient-facing app intuitive? Does it require a download, or does it work via web?
• What is the average patient adoption rate among the vendor’s current customers?
• Does the platform support post-discharge engagement (education tracks, subscription content)?
• Can patients communicate with their clinician through the app using HIPAA-protected messaging?
• Does the vendor track patient NPS or satisfaction?

One insight from HealthArc’s provider guide captures this well: the patient isn’t engaging with software. They’re engaging with the knowledge that their clinician sees them between visits. The tool is just the vehicle. Any tool that creates friction, requires confusing logins, or feels impersonal will fail regardless of its feature list.

Red Flags to Watch for During Vendor Demos

Practitioners who have been through multiple vendor evaluations consistently flag these warning signs:

1. Generic demos that don’t show your workflow. If the vendor can’t demo with your EHR, your visit types, or your patient population, they are showing you a marketing presentation, not a product evaluation. Ask to see your specific workflow.

2. “HIPAA compliant” with no BAA offered. Self-attestation without a signed BAA is meaningless. Walk away.

3. No data export path described. If they can’t explain how you get your patient data out in standard formats, assume you won’t be able to.

4. Revenue share on RTM billed as “free setup.” The setup may be free, but if the vendor takes 30 to 50% of every RTM code you bill, you are paying far more over time than a flat monthly fee.

5. RPM mislabeled as RTM. Per practitioner warnings on forums and in evaluation guides, this is a compliance risk. If the vendor’s platform was designed for RPM (blood pressure cuffs, weight scales) and rebranded for rehab, the documentation and coding workflows may not align with CMS requirements for RTM.

6. No proof of improved adherence. Every vendor claims they increase engagement. Ask for data: patient adherence rates, completion percentages, or outcomes studies from clinics similar to yours.

7. Clinician buy-in is an afterthought. One thing the checklist cannot capture: your clinicians have to believe in the program. If the platform is complicated, as one buyer’s guide put it, “a complicated system won’t be used effectively.” Ask for a trial period and let your staff try it with real patients before committing.

How to Run a Structured Vendor Evaluation

Step 1: Build a Weighted Scorecard

Create a simple spreadsheet with the seven categories above as rows and each vendor as a column. Assign weights based on your clinic’s priorities. A solo PT launching RTM for the first time might weight RTM Capability and Pricing highest. A multi-location group might weight Integration and White-Label highest.

Step 2: Structure the Demo

Send your questions to the vendor before the demo. Ask them to show, not tell. Request a live walkthrough of: creating a custom HEP, assigning it to a patient, viewing the patient’s adherence data, and generating an RTM report. If they cannot do this live, the feature may not work as advertised.

Step 3: Check References

Call at least two clinics of similar size and specialty. Ask specifically: What surprised you after go-live? What do you wish you had asked before signing? Would you choose this vendor again? Given that 32% of providers wouldn’t recommend their current EHR vendor, these calls are not optional.

Step 4: Pilot Before Committing

Community discussions across Reddit and practitioner forums consistently recommend piloting with a small patient subset before full rollout. A pilot of 5 to 10 patients over 30 days reveals adoption issues, workflow gaps, and patient feedback that no demo can simulate. Look for vendors that offer a free tier or trial period that makes this possible without financial risk.

→ Schedule a free demo and test with up to 5 patients at no cost to run a real-world pilot.

FAQ

What is a patient engagement vendor checklist?

A patient engagement vendor checklist is a structured evaluation framework that clinic owners and practice managers use to compare software platforms side by side. It organizes evaluation criteria into categories like security, clinical fit, pricing, and integration so you can score each vendor consistently rather than relying on demo impressions.

Why does selecting a patient engagement vendor checklist need to be rehab-specific?

General patient engagement checklists are built for hospitals evaluating enterprise portals and scheduling systems. Rehab clinics need criteria for HEP delivery, custom video capability, RTM billing automation, and rehab-specific outcome tracking. A generic checklist will miss the features that matter most to PTs, OTs, and SLPs.

What is the difference between RTM and RPM for vendor selection?

RTM (Remote Therapeutic Monitoring) captures therapeutic activity data like exercise adherence and pain ratings for musculoskeletal and respiratory conditions. RPM (Remote Patient Monitoring) tracks physiological data like blood pressure. PT and OT clinics should be billing RTM codes, not RPM codes. If a vendor pitches RPM for your rehab practice, that is a red flag.

How much does a patient engagement platform typically cost for a rehab clinic?

Costs range widely. Some platforms offer free tiers for small caseloads, while others charge $50 to $200+ per month per provider. The real cost includes setup fees, per-user charges, content library add-ons, and RTM revenue-share percentages. Always calculate total cost of ownership, not just the sticker price.

What is the biggest mistake clinics make when selecting a patient engagement vendor?

Skipping the pilot. Most vendor regret comes from workflow mismatches that only surface after go-live. Running a 30-day pilot with a small group of patients reveals problems that a polished demo never will. Choose vendors that let you test with real patients before signing a contract.

Should I prioritize custom video HEPs or a stock exercise library?

It depends on your clinical workflow. Custom video captures your exact cues and demonstrations, which research suggests improves patient comprehension and adherence. Stock libraries are faster to assign but may not match what the patient practiced in the clinic. Many clinics benefit from a platform that supports both, with custom video as the primary delivery method.

How do I avoid vendor lock-in with a patient engagement platform?

Ask three questions before signing: What data export formats do you support? How is patient data transferred if I switch vendors? Is the contract month-to-month or multi-year? If the vendor cannot provide clear answers to all three, assume switching will be difficult and expensive.

How many vendors should I evaluate before making a decision?

Three to five is the practical range. Fewer than three gives you insufficient comparison data. More than five creates evaluation fatigue without proportionally better outcomes. Use your weighted scorecard to narrow the field after initial demos, then do deep evaluations (reference calls, pilots) with the top two or three.