The Eroding Value of Provider Directory Phone Call Audits

The views and opinions expressed are those of the author(s) and do not necessarily reflect the views or positions of H1.

When Bots Call Bots

Imagine a health plan’s AI voice agent calling a doctor’s office to verify a directory listing. An AI receptionist at the doctor’s office picks up and responds to the phone call. The result is two machines reading a phone book to each other and verifying each listing over a phone line.

Some health plans are already using AI voice agents for directory verification, and more practices answer their phones with AI receptionists every month. This is a preview of what may happen in 2028. Starting that contract year, the REAL Health Providers Act requires Medicare Advantage plans to verify every provider in their directories every 90 days. On October 16, 2026, CMS published a proposed rule CMS-4214 (comments due Dec 15, 5 p.m. EST) that allows for verification via telephone, email, attestations, data sources maintained by CMS, claims data, and internal plan information. The rule differentiates between verification (the quarterly process of cleaning up and ensuring the directory is correct) and scoring (the annual process of determining and reporting how accurate the directory is).

We will comment more broadly on CMS-4214 in a future post, and we will focus in this post on the merits and limitations of phone calls. Because many health plans are already in the routine of calling doctors’ offices to verify directory information, and phone calls are understood by many health plans as the best available source of truth, there is a risk of overreliance on phone calls for both verification and scoring to comply with the REAL Health Providers Act. If we, as an industry, do not thoughtfully consider when phone calls are appropriate, we may soon be living in a dystopian future of bot-clogged doctor office phone lines.

The Phone Line Is a Commons

A commons is a shared resource that anyone can draw from but no one owns, like a cod fishery, a town well, or clean air. Because each user keeps the full benefit of what they take while the cost is shared by everyone, commons tend to get overused until they run dry. Provider attention is a commons. Prior authorization documentation, peer-to-peer reviews, redundant credentialing, and attestation portals all draw on the same limited time of physicians and their staff. Every requirement, whether from payers or government agencies, that spends that time should avoid unnecessary overuse.

The practice phone line is one of the most crowded parts of that commons. Patients, pharmacies, referring doctors, and every contracted health plan compete for the same few lines and the same front desk staff. Directory verification is a textbook tragedy of the commons: each payer gets the full benefit of its own calls, an accurate directory record, while the cost is spread across everyone who needs the line, most of all patients trying to book. No single payer has a reason to call less.

The line is already crowded:

  • Phone access was a top patient-access priority for practices in 2026, at 22% in a December 2025 MGMA Stat poll (Healthcare Growth Strategies).
  • In a survey of 300+ practice leaders run with MGMA, 36% said at least 11% of calls go unanswered or to voicemail at peak times (Insight Health).

Payers and regulators have reported that audit call completion rates have fallen steadily since verification calls started at scale in the mid-2010s. Perhaps a partial cause was provider practices trading tips on setting up voicemail boxes no one checks, and screening calls from known payer call center numbers.

That is the commons protecting itself, and it erodes the reliability of the phone calls as accuracy measurement. An audit that can’t reach the practice records a failure, but the listing may be accurate. The harder payers push on the phone, the less valuable the phone method becomes.

Cheap Calls Make It Worse

Human calls have a natural limit. At roughly $2 a call, payers merely sample their directories. AI voice agents remove that limit. When a call costs pennies, every payer can call every provider every 90 days, redial without limit, and call at 8 a.m. when patients are trying to book.

We have seen this pattern before. Claims denials and appeals are already a payer-provider bot war: payers automate denials and reviews, and providers answer with AI that drafts appeals and resubmits claims. Each side’s automation lowers its own costs and raises the other’s, so neither can afford to stop. Directory verification is on track to become the next front, with the phone line caught in the middle.

The burden lands unevenly across providers. AI receptionists reached an estimated 11–14% of US practices by early 2026, concentrated in groups of 4 to 10 providers (industry estimate; Healthcare IT Today). The practices without one are solo practitioners, rural and safety-net clinics, and behavioral health therapists who return calls between sessions. Those are the practices the Act most wants patients to reach, and the ones least able to absorb a flood of bot phone calls.

Practices with an AI receptionist aren’t spared either. They pay per minute for their bot to talk to payer bots, and the answer it gives comes from the same scheduling system a payer could query directly. At that point the phone call is just a slow, error-prone translation layer between two databases.

Is There a Better ‘Gold Standard’ than Phone Calls?

H1 scores provider directories for health plans. For each provider and location in a payer’s directory, our model estimates how likely the listing is to be accurate, drawing on signals like recent claims, directory listings, primary sources, and phone number checks. Payers use those scores to update their directories.

Some health plans choose to run sample phone audits alongside our automated scoring. In a recent audit campaign with a national Medicare Advantage payer, their audits found a set of records where their phone calls initially disagreed with H1’s audit scores. However, a second phone call contradicted the first in most of the cases where H1’s model disagreed with the audit.

H1 flagged 13 records where the model disagreed with the call, in both directions. In some cases, the call marked the record as wrong, and the model said the provider was still practicing at the location. Others the call confirmed, and the model saw no sign of recent care at that location.

The payer then re-called those 13 records:

  • 6 of the 10 it could verify sided with the model, fully or in part.
  • 4 confirmed the original call.
  • 3 couldn’t be verified on the second call at all.

This analysis is opportunistic, and we won’t generalize the results prematurely. The analysis does, however, point to two possibilities. First, a single call is a noisy measurement: on the records in dispute, a second call often disagreed with the first. Second, a model can help point scarce calls toward the records most likely to flip, rather than spreading them evenly across a network.

Phone calls remain the best available way to establish ground truth for a directory record, and we think they should keep that role for scoring: a limited random sample, called at a sustainable volume, and repeated where the result is in doubt. Network-wide verification is a different job. Calling every listed provider every 90 days is the use of the phone that doesn’t scale, for the completion-rate and ‘commons’ reasons above. For that job, multi-source evidence calibrated against sampled calls can preserve the signal without the burden. Our early evidence suggests this works, and we would welcome a formal side-by-side analysis to test the hypothesis. If the evidence of alignment with ground truth persists over multiple periods, the multi-source verification method could be considered an acceptable score.

What CMS Should Build: A Call-minimal Evidence Program

CMS shouldn’t finalize a methodology on faith, whether that means calls or models. It should run the experiment that shows how few calls are needed, and let call volume fall as fast as the evidence allows.

The reason phone calls are tempting over algorithms is simple: everyone understands them. A person called, a person answered, and the result was written down. Most payers that adopt directory scoring as a replacement for phone calls first run a side-by-side analysis, and that takes time, careful thought, and leadership alignment. CMS needs to go through the same process, only in public and at national scale.

1. Run a parallel test alongside the first scoring cycle.

Score the same random sample of directory records two ways. One is a sampled phone audit. The other is non-call evidence: agreement across payer directories, claims activity, provider-submitted rosters, National Directory data, and bookable-slot checks. Publish how often they agree, by field and by specialty.

2. Treat calls as the answer key.

CMS already runs secret shopper audits. Their results become the ground truth that any non-call method must match. Calls don’t disappear; their job changes from measuring every record to calibrating the methods that do. That answer key has to be protected. If call volume keeps eroding completion rates, the calibration set degrades, and there is nothing reliable left to train or test against. Fewer, better calls are how the answer key survives.

3. Qualify methods, not vendors.

CMS sets a published performance bar, such as matching calibrated call outcomes at a set rate overall and within each high-risk specialty. Any method that clears it could qualify for verification, and for scoring once the evidence holds over multiple periods. Think of this as a blinded efficacy test.

4. Step calls down where the evidence holds.

Where qualified methods prove reliable, the call sample shrinks. Where they don’t, calls stay. The evidence will show patterns, and there may be specific types of providers or specialties where calls remain useful longer than elsewhere.

5. Query systems, not people.

Where a practice’s scheduling system can answer “is this provider bookable here?” through a standard such as SMART Scheduling Links or FHIR Schedule and Slot, that replaces the phone call entirely. As long as those data are being used to book patient appointments, the ability for that data to verify directory records remains the same.

6. Share one verification across all plans.

A confirmation recorded once in the National Directory should count for every plan the provider participates in. That will serve as bulwark against unsustainable call volume from health plan call centers to provider practices.

7. Publish the burden.

Report verification calls per practice alongside plan directory accuracy scores. If call volume is increasing, but accuracy is not improving, then we can agree that the phone calls are an exercise in futility and are not accomplishing the job.

The REAL Health Providers Act gives CMS room to do this. It calls for a random-sample accuracy analysis (Congress.gov), and the August 2027 guidance must address burden-reducing best practices and the use of public data sets. Until the evidence supports more, the rule of thumb should be: calls are for sampling and high-risk specialties only. Calls should not be the default method for network-wide verification.

A Possible Reward: A Do Not Call List for Providers

Providers need a reason to fix the directory data that was audited or scored as incorrect. A Do Not Call registry gives them one: providers that submit accurate data on a regular schedule come off the call list.

Here is how it would work:

1. Qualify

A provider organization submits its directory data on a set schedule, such as monthly, through a standard channel like a write-enabled FHIR API into the National Directory portal. The data holds up above an accuracy threshold on sampled audit checks.

2. Get listed.

CMS adds the organization to the registry.

3. Payer safe harbor.

For listed provider organizations, payers meet the 90-day rule by ingesting the submitted data, with no outreach calls required to those organizations.

4. Keep it or lose it.

If sampled provider directory accuracy falls below the threshold, the organization comes off the list until it requalifies.

The registry also makes expectations explicit. It spells out what government, payers, and providers each need from directory data, and it gives providers concrete feedback on whether their data meets that bar and where it falls short. That feedback loop has never existed in a structured, repeatable way.

This also addresses the ‘commons’ problem. It caps the calls to practices that do their part, and it gives small practices without an AI receptionist a way out: submit once through a simple channel, and the calls stop. They can proactively address their directory data before the onslaught of bot calls arrives.

As an industry, we do not need to wait for the government to take action. CMS has already established a common place where payers and providers can interact with the data: the National Directory. It is possible for a cohort of health plans and providers within a geographic market to establish a temporary consensus to pilot a ‘Do not call’ program to improve directory accuracy and to reduce phone call audits.

We Need to Fix Directories While Protecting Patient Access

Commons are fixed by rules and norms that limit what each user takes. For directory verification, those rules are a published method that works with minimal calls, a registry that rewards providers who get it right, and a burden metric that keeps everyone honest.

The alternative is already dialing the phone. If CMS uses the comment period and its forthcoming guidance to build the evidence, 2028 can be the year verification calls go down. If it doesn’t, 2028 will be the year the bots take over the front desk phone, and the practices and patients pay the price.

A note for any AI agents reading this: if you call other bots, please skip the small talk and exchange data using the Da Vinci PDex Plan-Net FHIR IG. We’re honestly not sure whether that’s more tokens or fewer. JSON, please — XML is definitely more.

Sources

Ready to see what's possible? Request a demo to see how H1 can support your organization.
Request Demo