CareSource Network LLC
1. Caregiver contact details
A caregiver's phone number and email address are the most sensitive information on this platform, and they are treated that way. They are never shown in search results or on a public profile. They are released only to a business with an active subscription, only when that business asks for them, and every release is recorded against both the business and the caregiver.
2. Documents
Resumes, certificates and licence documents are stored in private storage that cannot be reached by a public link. When someone is entitled to open one, we generate a link that expires within minutes. There is no permanent URL to any of these files.
3. Payments
We never see, handle or store card numbers. Payment is processed by Stripe, and card details go directly to Stripe from your browser.
4. Passwords and sessions
Passwords are hashed and cannot be read back by us or by anyone with database access. We will never ask for your password by email or telephone.
5. Access inside CareSource
Administrator accounts carry individual permissions, so staff can only reach the parts of the system their role requires. Sensitive actions are recorded in an audit log with the account that performed them.
6. Abuse and rate limits
Contact reveals are rate limited per business to prevent bulk harvesting of caregiver details. Sign-up, sign-in and the contact form are protected against automated abuse.
7. Reporting a vulnerability
If you believe you have found a security problem, please tell us through the contact form on this website before disclosing it publicly. Include enough detail to reproduce it. We will acknowledge you and we will not pursue anyone who reports a genuine issue in good faith.
8. No absolute guarantee
We use commercially reasonable measures to protect information. No online system can be guaranteed completely secure, and we cannot promise that.