Dr. Maya Reyes thought she'd found the escape hatch. Burned out in employed practice, she took a direct primary care job one state over: a raise, a panel capped at 600 patients, no billing office, telehealth-friendly Fridays. She signed after two interviews and a glossy pitch deck.
Three months in, the cracks showed. The "physician-led" practice was actually owned by a management company, in a state with a strict corporate practice of medicine doctrine. Her telehealth follow-ups included patients who lived across the state line, where she wasn't licensed. Membership fees flowed through a parent company that skimmed a percentage, a fee-splitting question nobody had raised. And her contract carried a noncompete that would push her out of the metro area entirely if she left.
Nobody lied to her. Nobody told her, either.
That's the first mistake, and it's the one everything else hangs on: assuming DPC is one thing. It isn't. Some states have statutes spelling out that a membership practice isn't insurance. Others are silent, and silence isn't permission, it's ambiguity you have to live inside. Same model, different state, different risk.
The traps cluster into five categories: scope of practice, fee-splitting and corporate ownership, telemedicine and prescribing, noncompete and contract clauses, and patient fee structure restrictions. Let's walk through each one before it walks through you.
This article is for educational purposes only and is not financial advice, not legal advice, and not tax advice. State rules and figures vary, every contract is different, and you should consult a qualified professional, ideally a healthcare attorney licensed in the state where you'll practice, before signing anything.
Trap #1: Assuming Direct Primary Care Rules Are the Same Everywhere
This is the mistake that makes all the other mistakes possible.
State medical boards write their own guidance. State insurance departments decide how membership fees get treated. State corporate practice doctrines determine who can even own the practice that employs you. A DPC structure that's completely unremarkable in one state can be noncompliant, or at least legally shaky, in another.
And the DPC community accidentally makes this worse. Go to a conference or listen to a podcast and you'll hear glowing success stories. "We just charge monthly and it works great." Sure, in their state, under their board's guidance, with their attorney's structure. I've watched physicians take those stories as proof the model is portable. It isn't. The story travels. The legal framework doesn't.
Before you sign anything, pull these documents yourself, don't outsource this to the recruiter:
- The state's DPC statute, if one exists. Read the actual language, not a summary blog post.
- State medical board guidance on DPC, retainer medicine, and telehealth.
- Telemedicine and prescribing rules, including anything about establishing care or cross-state patients.
- The employer's compliance policies, and ask directly whether a healthcare attorney reviewed them, and in which state.
If the employer can't produce these or gets vague, that's your answer.
Trap #2: Ignoring Corporate Practice, Fee-Splitting, and Subscription Model Limits
Here's a sentence that will save you pain: a monthly subscription is not a compliance strategy.
Physicians assume that because patients pay a membership fee instead of filing insurance, the arrangement is automatically clean. Wrong. The subscription is just the payment mechanism. It does nothing to resolve who may legally own the practice, who may employ physicians, or how clinical revenue can be shared, and in states with strong corporate practice of medicine doctrines, those questions have teeth.
The red flags I tell people to hunt for:
- A management company taking a percentage of membership revenue. In some states, that looks a lot like fee-splitting, and "everyone does it" is not a defense.
- Referral incentives or bonuses tied to patient volume flowing between the MSO and physicians.
- Investor or lay ownership of the clinical entity in a state that restricts it.
- Management fees that scale with your clinical revenue rather than reflecting actual services provided.
- You as a 1099 contractor with no real control over clinical decisions, which can cut against physician independence requirements.
Before accepting, verify three things in writing: who owns the practice, whose entity collects the fees, and whether the structure preserves physician independence where the state requires it. If the answers come back fuzzy, "it's complicated," "our lawyers handled it," "don't worry about the corporate side", worry about the corporate side.
Trap #3: Overlooking Scope of Practice, Telemedicine, and Prescribing Restrictions
DPC doesn't exempt you from scope-of-practice law. It never did. But the model's whole pitch, small panel, flexible access, lean staffing, pushes you toward workflows that collide with state rules fast.
Start with your team. States differ on what nurse practitioners and physician assistants can do independently, supervision ratios, and what you can delegate. A DPC shop built around APPs handling routine visits while you supervise remotely may be perfectly fine in one state and a board complaint in another.
Then telemedicine. The convenient DPC workflow, message me, we'll do a video visit, I'll send the prescription, runs straight into:
- Licensure in the patient's state. The interstate compact helps, but it isn't universal, and your patients will travel or live near borders.
- Controlled substance prescribing. Federal rules layer on top of state ones, and some states add in-person visit requirements that can break a remote-first panel.
- Establishing-care rules. Some states want an in-person visit before certain remote care. If your DPC employer markets "fully virtual primary care," ask how they handle that.
My advice: test the real day, not the brochure day. Walk through an actual Tuesday, in-person visits, portal messages, a patient who's wintering in another state, lab orders, after-hours coverage, the ER follow-up call. Ask the employer to show you how each step stays compliant in that state. If they haven't thought it through, you'll be the one holding the risk.
Trap #4: Skipping Contract Review, Exit Clauses, and Noncompete Landmines
The contract is where physicians get burned worst, because the dangerous clauses don't look dangerous on a first read.
Vague termination language is the classic. A "without cause" clause with a short notice period means the practice can cut you loose mid-panel, and in DPC, your income is the panel. Patient non-solicitation clauses are nastier here than in traditional employment, because they treat your member list as company property. You built those relationships. The contract may say the employer owns them.
Then the non-obvious stuff, the things nobody mentions in the interview:
- Malpractice tail coverage. Claims-made policy? Who pays the tail when you leave? This is real money, and "we'll figure it out later" means you'll pay it.
- Buy-in and buyout terms, if ownership is dangled as a perk.
- Productivity definitions in a subscription model, how is your performance even measured?
- Call coverage and after-hours expectations, which in DPC can quietly mean "always."
- Chart and member-list ownership, which determines whether you can practice nearby if you leave.
Non-negotiable checklist: a healthcare attorney licensed in that state reviews the contract, your duties are clarified in writing, and every restrictive covenant gets checked against that state's law, some states limit or ban physician noncompetes, and you want to know which kind you're in. Skip this and you're not accepting a job. You're accepting whatever the contract says later.
How to Choose the Safer State and Safer Practice Setup
You can't eliminate risk, but you can stop walking into it blind. Compare states on four axes: legal clarity (is there an actual DPC statute?), board guidance (has the medical board said anything useful?), telehealth flexibility, and physician independence protections. A state that scores well on all four is a safer bet than one offering a bigger salary under a legal shrug.
Then verify on the ground:
- Hire local healthcare counsel. Not your cousin's real estate attorney. A lawyer who reads physician contracts in that state.
- Check state DPC associations, they know which structures have survived contact with regulators.
- Ask about the employer's compliance history, including whether any physician has left on bad terms.
- Talk to physicians who left, not just the ones the employer introduces you to. Former employees tell you where the bodies are buried.
So here's the call to action, and I mean it: do not pick a DPC job from salary and schedule alone. Run the state-trap checklist. Read the statute. Trace the money. Pay for the attorney review, it's the cheapest insurance you'll ever buy against a mistake that follows you for years.
Key Takeaways
- Do not assume a direct primary care job is legally interchangeable from one state to another; state rules can change the real value of the offer.
- The biggest mistakes are skipping legal review, ignoring corporate practice and fee-splitting issues, and overlooking telemedicine, prescribing, and contract traps.