Security

You’re trusting us with a lot. Here’s what we do with it.

Social security numbers, insurance cards, medication lists, wills. This page explains, in plain English, how CareTabs keeps them locked and who can see them.

Create free account

The short version

Three things to know. Everything else builds on them.

Every person gets their own key

Mom’s records are locked with her key. Yours are locked with yours. One key can’t open the other, even inside the same account.

Sensitive numbers stay hidden

Social security numbers, PINs and account numbers show as dots until you tap to see them. They never appear on screen by accident.

Only the people you invite

You share one person’s profile at a time, by email. Anything you haven’t shared stays private to you.

How the locking works

Think of each person as a locked box.

When you add someone to CareTabs, we create a brand-new key just for them. Everything you save for that person — down to each line of their address — is locked with it.

The keys aren’t kept with the boxes. They sit in Microsoft Azure Key Vault, a separate, dedicated service for storing keys. So nothing in our database can be read on its own.

You add a personA parent, a child, yourself. They get a key of their own the moment their profile is created.

Everything you save is lockedMedications, insurance, passwords, documents — stored locked, field by field.

The key is kept somewhere elseIt lives in Microsoft Azure Key Vault. Records are unlocked only when you open them.

Every protection

What CareTabs does, in plain words.

Sign-in required, every timeEvery request for your information checks that you’re signed in first. Sign-in is handled by Clerk, a dedicated identity service.

Protected on the way in and outEverything travels over an encrypted connection. Plain, unprotected connections are redirected automatically.

Delete a profile and its key goes tooWe don’t just clear the information. The key that unlocks it is deleted in the same step.

We don’t track what you storeOur usage tracking is built so it can’t record a document name or anything you search for. It rejects them.

A history that gives nothing awayYou can see who updated a record and when. The history never spells out what the record said.

Your files are never held hostageIf you stop paying, nothing locks. Everything you saved stays readable and downloadable.

Backed up every nightStill locked in the backup. A lost phone or laptop can’t take your records with it.

Your card never touches our serversPayments are handled by Stripe. We never see or store your card number.

Read-only or admin, your choiceWhen you invite someone, you decide whether they can only view a profile or also make changes.

Straight answers

The questions people actually ask.

Can CareTabs employees read my records?

Your records are stored locked, and the keys are kept in a separate service, so nothing sitting in our database can be read on its own. To show you a record, our system unlocks it at the moment you open it — the same way most online services work. We don’t track what you store, and our usage tracking is built so it can’t.

Who can see a profile I share?

Only the people you invite by email, and only the profile you shared with them. You choose read-only or admin for each person. You can cancel an invitation any time before it’s accepted.

What happens when I delete a profile?

The profile’s information, documents and sharing are removed, and the key that unlocks that profile is deleted in the same step.

What if I stop paying?

Nothing is deleted because a plan ended. Every profile, document and record stays readable and downloadable. If you’re over the free limits, you just can’t add new ones until you’re back under.

How are payments handled?

By Stripe, the company that handles payments for millions of businesses. Your card details go straight to them. We never see or store your card number.

Keep tabs on everything you care for.

Free for up to three people. No card required.