Operating picture · measured 2026-09-11
12,907 US IT providers name healthcare — 32.5% of the market.
Healthcare is the most-claimed vertical in US IT services by a wide margin. Of the 12,907 providers who claim it, 10,081 show a medical practice no HIPAA credential of any kind.
of 39,722 US providers name healthcare among the verticals they serve
n = 39,722 published US providers, of which 12,907 name healthcare, medical, clinical, hospital, physician, dental, telehealth or urgent-care work among the verticals they serve. Hospitality tags are excluded by name, because "hospital" is a substring of "hospitality" and a plain match over-counts this group by 221 firms. Verticals are on file for 25,691 of the 39,722, so an unknown counts against the share and 32.5% is a floor. Shares labeled "of the healthcare group" are against those 12,907. Measured 2026-09-11 in one repeatable-read snapshot.
- Shows a certification
- 30.7%
- Shows a Google rating
- 56.3%
- Median reviews, rated firms
- 8
- Median headcount
- 11
- Shows a certification
- 15.6%
- Shows a Google rating
- 43.8%
- Median reviews, rated firms
- 7
- Median headcount
- 9
The published statistic behind this
Cybersecurity is the most common published service among IT providers: 16,425 firms of the 36,575 that list any service at all.
n = 36,575 providers listing at least one service · measured 2026-09-17. The figures on this page are frozen at their own measurement date and are not recomputed from that table.
Services offered prevalence ▸One provider in three names healthcare
12,907 of 39,722 published US providers name healthcare among the verticals they serve — 32.5%. That makes it the most-claimed vertical on this site, ahead of finance, government, manufacturing and education. A medical practice running a procurement process is not choosing between specialists; it is choosing from roughly thirteen thousand firms.
The claim narrows almost nothing, because almost everyone makes it. Only 1,327 of the 12,907 name healthcare as the single vertical they serve. For the other 11,580, healthcare sits in a list alongside finance, legal, manufacturing and the rest.
The group does run larger than the directory. The median healthcare-naming firm that publishes a headcount reports 11 staff, across the 11,511 that publish one, against a directory median of 9 over 31,249 firms. Practices are buying from firms with a few more people than the typical provider here.
HIPAA is the number a practice should ask about
2,826 of the 12,907 show a HIPAA credential. That is 21.9%. The other 10,081 providers who tell medical practices they serve healthcare do not show a buyer a HIPAA credential of any kind.
Read that as "do not show us one", not as "do not hold one". Credentials are counted from what a provider publishes where a buyer can find it. A provider with a signed business associate agreement and a HIPAA program that never says so on its own site is counted in the 78.1%.
Certification of any kind is more common in this group than in the directory — 3,962 firms, or 30.7%, against 15.6% directory-wide — and it is still a minority. 8,945 healthcare-naming providers show no third-party credential at all. 6,866, or 53.2%, name compliance work as a service, which leaves 6,041 naming healthcare without naming compliance.
What the group will and will not tell you
Texas 1,325, California 1,310, Florida 945, New York 757, New Jersey 556 and Virginia 547 lead by provider headquarters. Those track state population and provider density more than they track healthcare; the six states with the most providers overall are close to the same six.
8,104 of the group, or 62.8%, name a security service, and 5,329, or 41.3%, name backup or disaster recovery. For a sector whose downtime is clinical rather than commercial, 7,578 healthcare-naming providers name no backup or continuity service at all.
Only 202 of the 12,907 publish a per-user, per-month rate — 1.6% of the group. Among those 202, the median of each firm's lowest published per-user monthly rate is $85. That figure describes those 202 firms; at 1.6% coverage it is not a healthcare pricing benchmark and should not be read as one.
What this number can't tell you
- ·This measures what providers publish about themselves, not who they actually serve. Any provider with medical clients who never names the vertical is counted in the 67.5%.
- ·Verticals are on file for 25,691 of the 39,722 published firms, so 32.5% is a floor and an unknown counts against it.
- ·"Healthcare" here pools healthcare, medical, clinical, hospital, physician, dental, telehealth and urgent-care tags. Hospitality tags are excluded by name: "hospital" is a substring of "hospitality", and a plain substring match pulls in 221 firms that serve hotels and restaurants rather than practices. The 12,907 are distinct firms, not tag mentions.
- ·Dental providers are included here. A dental-specific cut is published separately as its own finding, and the two groups overlap.
- ·HIPAA share reflects what a provider publishes. The credentials recorded on this site skew toward compliance frameworks and cloud programs, so a provider holding a healthcare-specific credential we do not record shows as none.
- ·Median headcount is over the 11,511 healthcare-naming firms that publish one, not all 12,907, and self-published headcounts are not audited.
- ·Review medians are over rated firms only. Rating values themselves are not plotted: google_rating bunches at the top of its range and a percentile of it would mislead.
- ·State counts are provider headquarters, not service areas. Practice IT is frequently delivered regionally, so a headquarters count understates who can serve a given clinic.
- ·The pricing figure is the median of each firm's lowest published per-user, per-month rate, over the 202 firms in this group that publish one, filtered to rates between $10 and $500. It is not a per-firm average and not a sector benchmark.
What to do about it
- ▸Buying: 32.5% of the market names healthcare, so the claim alone narrows nothing. Ask instead for practices by name, the EHR platforms they have migrated, and a HIPAA credential you can verify — 78.1% of the firms claiming your sector cannot show you one. 1,327 firms name healthcare as their only vertical, which is the short list if specialization is what you want.
- ▸Selling: the differentiator in this group is proof, not the claim. 10,081 healthcare-naming providers show no HIPAA credential and 6,041 name no compliance service, so publishing either one puts a provider ahead of most of the field it is competing against.
Questions this finding answers
- How many US MSPs serve medical practices?
- Healthcare is the most-claimed vertical in US IT services by a wide margin. Of the 12,907 providers who claim it, 10,081 show a medical practice no HIPAA credential of any kind.
- How was this measured?
- n = 39,722 published US providers, of which 12,907 name healthcare, medical, clinical, hospital, physician, dental, telehealth or urgent-care work among the verticals they serve. Hospitality tags are excluded by name, because "hospital" is a substring of "hospitality" and a plain match over-counts this group by 221 firms. Verticals are on file for 25,691 of the 39,722, so an unknown counts against the share and 32.5% is a floor. Shares labeled "of the healthcare group" are against those 12,907. Measured 2026-09-11 in one repeatable-read snapshot.
- What can't this number tell you?
- This measures what providers publish about themselves, not who they actually serve. Any provider with medical clients who never names the vertical is counted in the 67.5%.
Where does your firm sit on this?
Claim your MSP with a magic link from your company email to see your own certifications, reviews, web footprint and local rank measured against every provider we track.
Claim your MSP ▸Related markets
More findings
- 5.0%Only 5.0% of US IT providers name Microsoft 365 as a service.
- 31.3%12,422 US IT providers name backup or disaster recovery — 31.3% of the market.
- 95.8%419 of 39,864 US IT providers show a NIST 800-171 credential — 1.1% of the market.
- 76%76% of MSPs that sell cybersecurity hold no security certification at all.