Acceptable Use Policy

The principle

In short: Use it to run a home care agency honestly. That covers nearly everything.

This policy forms part of our terms of service and applies to everyone who uses the service through your account, including your office staff and caregivers.

Do not falsify visit records

In short: The whole product is a record that stands up to scrutiny. Faking entries defeats the point and may be fraud.

The visit record exists so an agency can prove care was delivered. Deliberately entering visits that did not happen, altering check-in times to misrepresent when a caregiver arrived, or having one person check in on another's behalf undermines that entirely.

Where visits are billed to Medicaid or another payer, falsifying records may constitute fraud with consequences well beyond your account being closed.

To be clear about what is fine: correcting a genuine error is expected and supported. That is why manual corrections require a written reason and are recorded in the audit trail rather than overwriting history.

Do not misuse other people's data

In short: Only enter information you have the right to hold, and only look at records you need.

• Enter client and caregiver information only where you have the right to hold it
• Give staff access only to what their role requires, and remove access when someone leaves
• Do not use the service to send unsolicited marketing to clients, their families or caregivers
• Do not use location data to monitor caregivers outside their scheduled visits

Do not attack the service

In short: No probing, scraping, overloading or reverse engineering.

• Do not attempt to access another agency's data, or any account you were not given
• Do not probe, scan or test the security of the service without our written permission
• Do not scrape the service, or place automated load on it beyond ordinary use
• Do not reverse engineer, decompile or attempt to extract source code
• Do not upload malware, or use the service to store or distribute unlawful content
• Do not resell or sublicense access without our agreement

If you find a security vulnerability, we want to hear about it. Report it to security@getcareverify.com and we will not pursue you for a good-faith report.

What happens if this is broken

In short: We talk to you first, unless the breach is serious or ongoing.

Where we can, we will contact you and give a reasonable chance to put things right. For serious or ongoing breaches, particularly those that put another customer's data or the service itself at risk, we may suspend access immediately and investigate afterwards.

Questions about whether something is allowed are welcome before the fact. Email legal@getcareverify.com.