RightCare MN is a directory of licensed senior and adult care providers in Minnesota. This page explains what we collect when you use the site, why we hold it, and who else sees it. It is written to be read, not to be survived.
The short version. We do not sell your personal information. We do not run advertising trackers. The only information we ask for is what a provider needs in order to reply to you, and we only pass it to the specific provider you contacted.
What we collect
Almost everything we hold about a person is something they typed into a form and pressed send on. There are four:
- Contacting a provider. Your name, email address, phone number (optional), your relationship to the person needing care (optional), and your message. This is stored against the listing you contacted.
- Contacting us. Whether you are a family or a provider, your name, email address, phone number (optional), the topic you chose, and your message.
- Claiming a listing. Business name, your name, your role, work email, phone, website, business address, care category, and licence number, plus anything you write in the description.
- Requesting a marketing audit. Business name, website, category, and email address.
We do not ask for and do not want health information, diagnoses, care plans, Social Security numbers, or financial account details. Please do not put them in a message. We are not a healthcare provider and not a HIPAA covered entity, so a message to us does not carry the protections a message to a clinic would.
We do not process payments on this site. There is no checkout, so we never receive or store card numbers.
Cookies and analytics
The site sets two cookies, both functional:
- A form-security token (
cf_csrf), which proves a form submission came from a page we served rather than from another site. Without it, forms stop working. - A sign-in session cookie, set only if you sign in to a provider or admin dashboard. It is signed, marked HttpOnly, and expires on its own.
There is no advertising cookie, no marketing pixel, and no cross-site tracker. We use Vercel Web Analytics, which counts page views without cookies and without building a profile of you, and we look only at aggregate numbers.
Who else sees your information
When you message a provider through the site, that message is reviewed by us before release — partly for spam, partly so a provider can't be pointed at someone who plainly meant to reach a different service. Once released, the provider you contacted receives it so they can reply. Providers on a free listing see a redacted version of your contact details until they upgrade; the message still reaches them.
We share your information with no one else, and we never sell it or rent it to data brokers or lead resellers.
A handful of vendors process data on our behalf in order to keep the site running:
- Supabase — the database that stores listings, messages, and accounts.
- Resend — sends the site's email (activation links, notifications, forwarded messages).
- Vercel — hosts the site and provides the cookieless analytics above.
- Google Fonts — serves the site's two typefaces. Your browser requests them from Google, which means Google sees the request.
- OpenStreetMap and unpkg — supply map tiles and the mapping library on pages that show a map. Both see the request your browser makes.
We may also disclose information if the law requires it, or if it is necessary to investigate abuse of the site.
Where listing information comes from
Provider listings are built from public sources: state licensing records, providers' own public business listings, and information a provider gives us directly when they claim their listing. Ratings and review counts, where shown, come from a provider's public Google listing — we do not write reviews and we do not invent scores. A provider with no reviews shows "No reviews yet".
If you are a provider and something in your listing is wrong, you can claim the listing and correct it, or write to us and we will fix it.
How long we keep it
Messages to providers and to us are kept while they are useful for follow-up and for handling disputes, and are deleted when they are not. Claim records are kept as long as the listing is claimed, because they are the evidence of who claimed it. Sign-in sessions expire on their own. If you want something deleted sooner, ask.
Your choices
Write to hello@rightcaremn.com — from the address you used, where you can — and you can ask us to:
- tell you what we hold about you;
- correct anything that is wrong;
- delete it;
- stop sending you email.
We answer these regardless of which state or country you live in. We aim to reply within 30 days. Note that if you have already messaged a provider, we cannot retrieve what they now hold — you would need to ask them directly.
Security
The site is served over HTTPS. Passwords are never emailed or issued by us: an account is created without one, and the account holder sets their own through a single-use link. Stored passwords are hashed. Dashboards are gated server-side, so signing out or lacking permission means the data is never sent to the browser at all.
No system is perfectly secure, and we won't pretend otherwise. If you find a vulnerability, please report it to hello@rightcaremn.com before disclosing it publicly.
Children
This site is built for adults arranging care — for themselves, for a parent, or as a professional. It is not directed at children under 13 and we do not knowingly collect their information. If you believe a child has sent us something, tell us and we will remove it.
Changes to this policy
When our practices change, this page changes, and the date at the top moves. If a change materially affects people who have already contacted us, we will say so here rather than quietly editing the text.
Contact
Questions about this policy, or about anything we hold: hello@rightcaremn.com, or the contact form. RightCare MN is operated from Minnesota, United States.