Security & privacy
Built to protect the people you're caring for.
You're trusting CareHub with a parent's most sensitive records. Here's how we look after them — in plain language, without the scare tactics.
How we protect your family's information
Encrypted in transit and at rest
Everything you send is protected on the way to us and stays encrypted while it's stored. No plain-text records sitting on a disk.
Built to HIPAA-grade standards
We hold ourselves to HIPAA-grade practices on BAA-covered infrastructure — even where the law wouldn't require it — because families keep health information here. It's a standard we work to, not a badge we claim.
Sensitive data kept separate
Health, financial, and contact details are stored apart from everyday information, with stricter access — so the most sensitive records are the hardest to reach.
A private vault only you can open
Your family's vault is end-to-end encrypted. Its contents can be unlocked only by your family — not even we can read them.
Consent, not control
Your parent controls their own health and location sharing — no one can turn it on for them.
A caregiver or family owner can never enable sharing on someone else's behalf. While location is being shared, the person sharing it sees a clear, persistent indicator and can switch it off at any time. Where someone genuinely can't manage their own account, sharing has to rest on documented authority such as a power of attorney — never a simple role toggle.
We don't sell data or run ads
- We never sell or share your family's information.
- There are no ads in CareHub, and there never will be.
- We don't put personal information into analytics or crash reports — only anonymous codes that help us fix problems.
- Notifications stay vague on purpose: a lock-screen alert says you have a new message, never what it's about.
Common questions
Is CareHub HIPAA compliant?
CareHub is built to HIPAA-grade standards on BAA-covered infrastructure, even where the law wouldn't require it. HIPAA compliance is an ongoing practice rather than a one-time certificate, and we hold ourselves to that standard because families store health information with us.
Can CareHub read the documents in our vault?
No. Your family's private vault is end-to-end encrypted, so its contents can be opened only by your family — not even we can read them.
Do you sell our data or show ads?
No. We never sell or share your family's information, and there are no ads. We don't put personal information into analytics or crash reports.
Who decides what health or location information is shared?
The person it belongs to. Your parent controls their own health and location sharing — no one can turn it on for them.
Care that respects the person you're caring for.
Join the waitlist and we'll let you know when CareHub opens.