Privacy and security
How we protect your family's sensitive information.
Data encryption and protection
All data is encrypted in transit using TLS 1.2 or higher and encrypted at rest in the database. This means your information is protected whether it is being sent between your device and our servers or stored in the database. We use the same encryption standards as major banks and healthcare organizations. Sensitive fields like medical conditions and medication information receive additional encryption. Our hosting infrastructure is provided by Vercel and Supabase, both of which maintain SOC 2 compliance and undergo regular security audits.
Row-level security and access control
Senior Support Resources uses Supabase with Row Level Security (RLS), which means access control is enforced at the database level, not just in the application code. Every database query is filtered by the requesting user's permissions. Even if there were a bug in the application code, the database itself prevents unauthorized access to data belonging to other care circles. You can only see data for circles you are a member of, and your role within the circle determines what actions you can perform.
What we never do with your data
We never sell your data to anyone, for any reason. We never show advertisements. We never share your information with third parties for marketing purposes. We never use your care data to train machine learning models. The only third parties that process your data are essential service providers (hosting, email delivery, SMS messaging), all of which are bound by data processing agreements that restrict how they handle your information. We do not monetize your data in any way.
HIPAA-aware design principles
While Senior Support Resources is a caregiving coordination tool and not a covered entity under HIPAA, we design our systems following HIPAA security principles: minimum necessary access (users see only what they need), comprehensive audit logging of data access, encrypted storage for all health information, secure authentication with password hashing, no logging of protected health information in application logs or error messages, and regular security reviews. We treat your care data with the same seriousness that a healthcare provider would.
Tips for keeping your account secure
Use a strong, unique password that you do not use for other accounts. Do not share your login credentials with other family members; invite them to create their own accounts instead so that each person's activity is tracked individually. Log out when using shared or public computers. If you suspect unauthorized access to your account, change your password immediately and review your recent activity log. Contact support at support@seniorsupportresources.com if you notice any suspicious activity or have security concerns.