Privacy Policy
Last updated: October 31, 2026
CareBOS LLC ("CareBOS", "we") makes back-office software for home-care agencies — scheduling, electronic visit verification, payroll, and billing. This page explains what information moves through CareBOS and how we treat it, in plain words.
Whose information we hold
Almost all of the information in CareBOS belongs to the home-care agencies that use it: records about their clients, their caregivers, and the care they deliver. Each agency is the owner of its own records; CareBOS processes them only to run the software, under written agreements with each agency, including HIPAA business-associate agreements where health information is involved.
Health information
Care records can include protected health information (PHI). We treat all of it as confidential: it is encrypted in transit and at rest, access is limited to the agency it belongs to, every access is logged, and we never sell it, advertise with it, or share it with anyone except as the agency directs or the law requires.
Text messages
What we text: messages from your home-care agency about your work there, sent from our toll-free number on the agency's behalf. They are all account and service messages — we never send marketing texts:
- Sign-in codes and links — a one-time code when you ask for one on the sign-in page, or your portal's link.
- A welcome message when your agency adds you to its caregiver portal, with the link to sign in and get the app.
- Shift reminders and office notices — a reminder of an upcoming or unfinished shift, or a notice from your agency's office. You can turn reminders off inside the portal.
- Message and data rates may apply. Message frequency varies: a few messages a week for most caregivers.
- Reply STOP to any message to stop receiving texts. Reply HELP for help, or contact your agency's office.
- If you opt out, you can still sign in — ask your agency's office for another way in.
Phone numbers used for these texts are never sold, rented, or shared with third parties for their own marketing. Mobile information is used only to deliver the messages described here. No mobile opt-in data is shared with anyone for marketing or promotional purposes. The program's text messaging terms have the details.
The CareBOS caregiver app
Caregivers use the CareBOS app (on iPhone and Android) and the caregiver portal to do their work for their agency. What the app collects goes to that agency and is used only for that work:
- Your phone number (and your email address, if you ask for the code by email), to find your agency and send you a sign-in code.
- Your location, when you clock in or out — to show the clients you are near and to record where each visit started and ended. Medicaid's electronic visit verification requires this, and your agency sends each visit, with those locations, to the state's verification system. Your agency's office can also ask where you are: the app shows the request, and shares your location only if you tap Share; a location you share is kept with your record. While the app is open, your office can see that it is open (and when it last was), so it knows whether a request can reach you. The app never tracks you in the background.
- Photos and files you choose to send — a voided check, your headshot for your ID badge, or paperwork your agency asks for.
- Pay and tax details — your bank account for direct deposit (it goes to the bank in your agency's payroll file), and your W-4 choices, home address and Social Security number, which go on your tax forms.
- Your visits and what you sign — the tasks you check off, the messages you send your office, and the agreements and forms you sign. A signature is saved with its date and time and the network address and device it came from, as electronic-signature records require. On a nurse visit, the client's signature and your visit notes are saved too.
Face ID, Touch ID and fingerprint sign-in are checked by your phone; your face or fingerprint never leaves it. The app has no ads and no tracking, and we never sell what it collects. If something goes wrong in the app, a short error report — what failed, on which screen, and the phone's app and browser version — reaches us with your name, so we can fix it. To change or remove your information, ask your agency's office — it keeps your records as long as home-care and tax rules require.
Website visitors
The carebos.com marketing site does not use advertising trackers. If you send us a demo request or sign up, we use what you typed to respond to you and to set up your account — nothing else.
How we protect it
- Encryption in transit (TLS) and at rest, for databases, files, and backups.
- Sign-in requires two-step verification for every office and administrative user.
- Access is role-based and limited to each agency's own records, with audit logs.
- Hosted in the United States.
Keeping and deleting information
Agencies keep their records as long as home-care regulations require them to. When an agency leaves CareBOS, its records are returned or deleted as its agreement directs.
Outside data we use
Our built-in maps: © OpenStreetMap contributors, under the Open Database License. City names for Missouri ZIP codes, used to read the city correctly from addresses on Medicaid paperwork: GeoNames, under the Creative Commons Attribution 4.0 license; we keep only the Missouri ZIP codes and their city names.
Questions
Write to info@carebos.com — CareBOS LLC, 117 S Lexington St, Ste 100, Harrisonville, MO 64701.