Resources
Security & Data Protection
Your parent's care information is personal. Here's how we protect it.
How We Protect Your Data
Security isn't an afterthought at RelayCare — it's built into everything we do.
Encrypted Connections and Storage
Data travels over encrypted connections (TLS) and is encrypted at rest by our database provider. It is protected in transit and where it's stored. It isn't end-to-end encrypted: RelayCare's systems need to read your information to show it to your family and to run features like document reading.
Trusted Providers
RelayCare is built on Supabase (database and sign-in) and Amazon Web Services (document reading, AI, and transcription). Both publish their own security reports, and we only use them for those jobs.
Access Controls
Each family's record is kept separate by the database itself, and only people in that family's Care Circle can open it. Owners choose each person's role (Owner, Caregiver, or Viewer) and can change or remove anyone at any time.
Sign-In Without Passwords
You sign in with a one-time code or link sent to your email, so there is no password to steal or reuse. Opening an insurance document on the website asks for a fresh emailed code first, and on the phone a Social Security number is kept behind Face ID or the phone's passcode.
Some Things Stay on Your Phone
A Social Security number and photos of an ID or insurance card kept in the phone's Care Vault are stored only on that phone, in its secure storage, and are never sent to RelayCare's servers.
Backups and Deleting
You can download everything you can see, or delete your account, in Settings. Deleting is permanent and immediate. Our database provider may keep encrypted backups for a short time afterward, and they are removed on their own schedule.
Privacy By Design
We don't just add security features on top. Privacy and security are built into the foundation of RelayCare.
- No selling your data. We don't make money by selling or sharing your information with advertisers.
- Minimal data collection. We only collect what's necessary to provide the service.
- Your data, your control. You can export or delete your information at any time.
- Transparent practices. Our Privacy Policy is written in plain language, not legal jargon.
Your parent's medical information stays private.
We don't sell your information, we don't use it for advertising, and we don't share it with marketers. Your family's information is yours, and it stays that way.
Common Security Questions
RelayCare is a tool for families, not a healthcare provider, so it is not a HIPAA covered entity. We don't claim HIPAA compliance or certification. What we do is described on this page and in our Privacy Policy, and you can hold us to it.
Security Researchers
If you discover a security vulnerability in RelayCare, please report it responsibly:
Email: security@getrelaycare.com
Please include a detailed description of the vulnerability and steps to reproduce it. We'll read every report and reply as soon as we can.