Security at NextCaregiver
Last updated October 8, 2026
An overview of NextCaregiver security and privacy safeguards for family care information.
Access controls
Each care record is permission-based. Care-space creators and invited family members receive access according to their role, and the application checks those permissions when records are read or changed.
Authentication
Accounts require authentication and email verification. Users should choose a unique password, protect their email account with multifactor authentication, and sign out of shared devices.
Private files and notifications
Documents use private uploads and protected access links. Family notification emails contain a generic notice and intentionally omit care details.
Human review
AfterCall Update creates an editable draft. It cannot silently change the medication list; every proposed medication change requires explicit human confirmation, and the original note remains available.
Payments
Web payment details are collected using Stripe-hosted Checkout, so NextCaregiver does not store card numbers. Payment secrets and webhook signing secrets remain server-side.
Scope and reporting
NextCaregiver is intended for families coordinating care. It does not currently claim HIPAA compliance or provide a healthcare-provider business associate agreement. Do not use it to process protected health information on behalf of a healthcare organization without a separately approved compliant arrangement. Report a suspected security issue through the NextCaregiver contact page without including care details.