GPS, NFC Tags, or Fingerprints: Comparing Visit-Proof Methods

Updated August 28, 2026 · 6 min read

Every home care operator eventually sits through three vendor pitches that contradict each other politely. One says GPS geofencing is the industry standard. One says tags at the door are the only real proof. One demonstrates a fingerprint scanner and implies everything else is theatre. The confusion dissolves the moment you notice that the three are not competing answers to one question; they are answers to three different questions. A visit record has to establish who provided care, where, and when, and each technology is strong on a different word. The honest comparison, which no single-method vendor will give you, goes like this.

GPS proves where a phone was

Location capture at clock-in and clock-out is the baseline of modern visit proof, and its virtues are real: every smartphone has it, it costs nothing extra, and it turns each punch into a point on a map. Used well, it is presented honestly as a proximity signal, each visit carrying its punch-to-client distance with a green, amber or red badge, and a map view where a coordinator can see the client's pin, the punch markers and the geofence circle when adjudicating an ambiguous one. An agency can enforce a geofence, refusing clock-ins beyond the radius with the measured distance shown, and pair it with a clock-in window so punches cannot start padding hours long before the shift.

Its honest limits are two. Technically, GPS locates the device, not the person, and does so within a radius that high-rises and basements stretch. Legally and ethically, it is employee location data, with the proportionality and notice duties the FAQ covers; the defensible design captures location at the two punch moments only. GPS answers "was the phone near the home at clock-in?" precisely and nothing more, which is often enough, and is exactly why the next layer exists.

An NFC tag proves someone stood at the door

Register a small tag at the client's home, and the clock-in tap becomes evidence of a different kind: a physical touch between the caregiver's device and an object that lives at that address. Unlike a QR code, it cannot be photographed and reused from a couch across town; unlike GPS, it does not blur in an apartment tower where thirty units share one coordinate. A verified tap can stand in for the geofence entirely, a wrong tag is a hard stop, and a voluntary departure tap closes the clock-out-from-the-car-park gap by proving the end of the visit happened at the door too, the both-ends pattern that US and UK verification regimes converged on. The accountability design matters as much as the chip: visits at tagged homes record whether each punch was tapped, skipped taps wear amber badges and gather in a one-click exception list, and an agency can require a stated reason for skipping, so the tap can be missed honestly but never silently.

A fingerprint proves who

The third question, identity, only becomes the hard one when phones stop being personal, and the FAQ covers the operating model where that happens: shared kiosk devices in offices and transport vans, biometric punches, a four-punch day that computes travel time between the legs. What deserves emphasis is that this is not an exotic tier but the same visit record by another road: in Carelyst, a kiosk duty pair materializes a visit with a biometric verification method that flows through the identical auto-verification, billing gates, invoices and payroll as an app punch: one proof architecture, served by three different sensors.

Proof is only half the system; the other half is what reviews it

Whichever sensors you choose, the captured evidence is worthless if a human has to inspect every visit or, worse, if nobody inspects any. The working pattern is exception-based verification: visits whose punches land within a configurable tolerance of the schedule, fifteen minutes is a sensible default, verify themselves automatically, and coordinators review only the exceptions, filtered in one click. Skipped tag taps stay in the human queue even when the times look perfect, because the missing proof is the exception. The teeth come from the billing gate: an optional rule that invoices and payroll pick up only verified visits, with the review queue surfacing as a dashboard count and a warning at generation time when unverified work sits in the period. That converts verification from a virtue into a workflow: the money literally waits for the evidence, and the evidence is reviewed by exception rather than heroism.

One practical footnote that separates field-ready systems from demo-ready ones: homes have dead zones and rural routes have no signal, so punches must be offline-safe, recorded on the device and synced later without ever duplicating a visit, and a kiosk in a van should tolerate days offline without losing a single punch. Ask every vendor what happens to a clock-in with no connectivity; the answer tells you whether their proof survives contact with the real countryside, and a hesitant answer here predicts every rural route on your map becoming a nightly correction queue.

Layer by workforce, never block care

The practical answer to "which method?" is therefore a matching exercise, not a ranking. Independent caregivers with their own phones: GPS as baseline, NFC tags on the homes where proof matters most or geofences misbehave. Agency-transported teams or staff without smartphones: kiosk biometrics. Mixed operations: all three, feeding one review queue, one verification standard, one billing gate. Above every choice sits the rule that separates humane systems from hostile ones: proof failures route to review, care is never blocked, and every exception is a recorded, reasoned event a coordinator adjudicates with a map and the context. That layered, care-first architecture is precisely what Carelyst ships, from geofence and tags to the fingerprint kiosk tier, all landing in the same verified visit record your invoices and payroll already trust. Start a free 14-day trial and match the proof to your workforce instead of your workforce to a vendor's favourite sensor.

Frequently asked questions

Legal with conditions, and required by none of the provincial home care regulations and standards we reviewed, which contain no GPS or geofenced check-in requirement for home care; the requirements that do exist, like Alberta's documented-at-time-of-care rule for client-directed invoicing or Nova Scotia's verify-authorized-against-actual standard for funded agencies, are technology-neutral. On the legal side, a caregiver's location data is personal employee information, and privacy law such as Alberta's PIPA lets an employer collect it without consent only where reasonably required for the employment relationship, with advance notice to staff about what is collected and why. The design that satisfies both the law and the workforce is proportionality: capture location at the clock-in and clock-out moments, where it verifies the visit, and never as continuous tracking of a caregiver's day. Vendors implying legal necessity, or shrugging at the privacy duty, are wrong on both counts.

Because of what each can and cannot fake. A QR code is an image; photograph it once and it scans forever, from anywhere, which makes it presence-proof in name only. GPS locates the phone within a radius that urban towers, apartment buildings and basements can stretch, so it proves proximity, honestly but fuzzily. An NFC tag is a physical object registered to one client's home, and the tap requires the caregiver's device to physically touch it: no photograph, screenshot or forwarded message can reproduce that. A verified tap is therefore the strongest at-the-door evidence available on an ordinary phone, and a tap on the wrong client's tag can be treated as a hard stop rather than a judgment call. Tapping at departure too closes the classic gap where clock-out happens from the parking lot, the both-ends pattern that US fixed-visit-verification and UK call-monitoring systems established.

When the phone assumption breaks. Everything GPS and NFC methods share is the premise that each caregiver carries their own smartphone; that premise fails for teams without smartphones, and for operations, common in Gulf-market home care, where the agency transports caregivers in vans and controls the workday from door to door. There, the honest instrument is a shared kiosk device: an office or vehicle terminal with a fingerprint scanner, where each punch biometrically identifies the person, not a phone that could be handed to a colleague. A four-punch day, office-in, duty-in, duty-out, office-out, separates travel from care time automatically. The privacy bar is correspondingly higher: fingerprint templates should be stored as encrypted, vendor-portable ISO-standard templates rather than images, enrollment should be a guarded, permission-gated act, and biometric handling belongs in the agency's privacy policy in plain language.

Care proceeds, evidence degrades gracefully, and the exception gets reviewed by a human. This is the care-first principle, and it is the single most important design choice in visit verification: a missing GPS fix, an unpinned address or an unreadable tag must never block a caregiver from starting care, because the alternative is a frightened client waiting outside a software error. The visit happens, routes to a review queue with the reason recorded, and a coordinator adjudicates it with the evidence that does exist. Skipping a required tag tap can demand a stated reason, tag missing, phone cannot read it, emergency, so the skip is a deliberate, auditable act rather than a silent habit, and skipped-tap visits carry a visible badge with a one-click exception list. Systems that hard-block care to protect evidence have the priorities exactly backwards.

Electronic visit verification is a US Medicaid construct; we reviewed Ontario's home care regulation, Alberta's continuing care standards, BC's policy manual, Quebec's home support orientations and Nova Scotia's standards and found no electronic visit-verification mandate in any of them. What Canadian funders do demand is proof: Alberta's client-directed program requires documentation showing when care began and ended, made at the time of care, with clawbacks for claims that cannot show it, and Nova Scotia requires funded agencies to reconcile authorized visits and hours against actual. The US statute's six data elements, service, client, caregiver, date, location, start and end times, make an excellent voluntary specification, and any of the three methods, properly recorded, captures them. Choose the method for your workforce; the compliance follows from the record, not the gadget.

See Carelyst with your own clients and caregivers.

Start your 14-day free trial

No credit card to start · Cancel anytime