Privacy & HIPAA

Every resident database is encrypted at rest.

Encryption isn't reserved for one flagship app — it's applied consistently across every app in the suite that stores resident data, with the three highest-use apps also requiring a biometric unlock before they open.

Get Started → See all apps ↓

By Design

Two layers, applied where each one matters

The suite's offline architecture already means resident data never leaves the device. Encryption and biometric lock protect that data on the device — the scenario that matters when a phone is lost, stolen, or picked up by someone who shouldn't be looking at it.

Each database is encrypted with SQLCipher, using a unique 256-bit key generated on first run and stored in the platform's hardware-backed secure storage — the Android Keystore or iOS Keychain. The key never touches the database file itself, and it's not recoverable by reading the app's files off a lost device.

Three apps — the ones used constantly, handed around during shifts, and left unlocked between uses — add a second layer: a fingerprint or face-unlock gate at launch, so even an unlocked phone doesn't hand over resident data to whoever's holding it.

6 / 6

Resident-data apps encrypted

256-bit

SQLCipher key strength

Apps with biometric lock

Keys stored in the database file

App-by-app coverage

MAR Companion — encrypted at rest + biometric lock. Medication records are the most sensitive data in the suite.
DSP Buddy — encrypted at rest + biometric lock. Incident logs, used throughout every shift.
Resident Check — encrypted at rest + biometric lock. Quick-capture resident status, handed off between staff constantly.
Resident Goal Tracker — encrypted at rest. Behavioral goal and progress data.
Resident Ledger — encrypted at rest. Per-resident mileage and financial records.
DSP Wellness — no resident data stored, so neither layer applies. It's a staff self-check-in tool, not a resident record.

The split isn't arbitrary: every app holding resident information is encrypted, full stop. Biometric lock is layered on top for the apps in constant, shared use during a shift — where the bigger risk is an unlocked phone in someone else's hands, not just a lost device.

Keep reading

📵Data Stays on Device Anonymous identifiers, zero bytes to the cloud, and what that means for HIPAA.📵Works Offline No internet, no signal, no problem — and why that matters here.

MAR Companion Medication records that never touch a server.

Every resident database is encrypted at rest.

Two layers, applied where each one matters

App-by-app coverage

Keep reading

Your DSPs deserve better tools.