Who sees what
- Each agency is walled off. Every request is tied to the signed-in person’s agency, and the data layer adds that agency to every read and write. One agency can’t query another’s clients, caregivers or visits.
- Three roles. Owners and admins run the office. Caregivers see only their own shifts, the clients assigned to them, the sections of the care plan the office marks for caregivers, and their own hours.
- Invitation only. There is no public sign-up. The agency invites each admin and caregiver, and ending a caregiver’s access signs them out.
On the caregiver’s phone
So a visit can be documented with no signal, the app keeps a working copy of the caregiver’s own schedule, assigned clients and care plans on the phone, plus any clock-in, note or signature waiting to send. That copy is cleared when the caregiver signs out.
The iPhone and Android app asks for network access only. It doesn’t request the camera, location, contacts or photos.
When clock times were recorded on the phone while offline, the visit is marked “Recorded offline” and goes to the office’s review queue rather than counting straight away.
Records you can defend
- Changes to a visit’s hours or note require a reason and are added to the visit’s corrections trail rather than overwriting the original.
- An edit made after the client signed flags the visit “Changed after signing”.
- Important office actions are written to an audit log.
- Exports reproduce the record in the paper-form layout, including the signature and the attestation the client signed.
Infrastructure
- Every connection to AideBook uses HTTPS.
- Data lives in a managed PostgreSQL database reached over the hosting provider’s private network.
- The API refuses to start in production without a strong signing secret for sessions, and sign-in attempts are rate limited.
- Security headers are set on every API response.
What we don’t do
- No GPS or location tracking of caregivers.
- No advertising, no ad networks, no selling of data.
- No third-party analytics or tracking in the app, and none on this website.
- No clinical records, insurance claims or eligibility checks.
Reporting a problem
If you think you’ve found a security issue, email hello@aidebook.app with the details. We’ll reply, keep you posted while we fix it, and credit you if you’d like. See the privacy policy for how personal information is collected and used.
Last reviewed .