RightCare MN is a directory of senior and adult care providers in Minnesota. This page explains what we collect when you use the site, why we hold it, and who else sees it. It is written to be read, not to be survived.
The short version. We do not sell your personal information. We run one advertising tracker, the Meta Pixel, so we can tell which of our Facebook and Instagram ads actually work — what it does and how to refuse it. The only information we ask for is what a provider needs in order to reply to you, and we only pass it to the specific provider you contacted.
What we collect
Almost everything we hold about a person is something they typed into a form and pressed send on. There are four:
- Contacting a provider. Your name, email address, phone number (optional), your relationship to the person needing care (optional), and your message. This is stored against the listing you contacted.
- Contacting us. Whether you are a family or a provider, your name, email address, phone number (optional), the topic you chose, and your message.
- Claiming a listing. Business name, your name, your role, work email, phone, website, business address, care category, and license number, plus anything you write in the description.
- Requesting a marketing audit. Business name, website, category, email address, phone number (optional), and the package you're interested in.
We do not ask for and do not want health information, diagnoses, care plans, Social Security numbers, or financial account details. Please do not put them in a message. We are not a healthcare provider and not a HIPAA covered entity, so a message to us does not carry the protections a message to a clinic would.
Paid plans are paid through Stripe, our payment processor. Card details are entered on Stripe's pages and go straight to Stripe — we never receive or store card numbers. Stripe tells us the plan, the billing email, and whether a payment succeeded, and handles your card under its own privacy policy.
Cookies and analytics
The site sets these cookies:
- A form-security token (
cf_csrf), which proves a form submission came from a page we served rather than from another site. Without it, forms stop working. - A sign-in session cookie, set only if you sign in to a provider or admin dashboard. It is signed, marked HttpOnly, and expires on its own.
- Google Analytics cookies (
_ga, and one whose name begins_ga_). They let us tell a returning visitor from a first-time one and see which pages get used. They expire on their own after two years, and any browser setting or extension that blocks Google Analytics will refuse them — nothing on this site stops working if you do that. - Meta Pixel cookies (
_fbp, and_fbcif you arrived here by clicking one of our ads). They are how we tell which advertisement brought someone to the site. They expire on their own after about three months, and any browser setting or extension that blocks Meta will refuse them — nothing on this site stops working if you do that.
We measure the site two ways: Vercel Web Analytics, which counts page views without cookies and without building a profile of you, and Google Analytics 4, which sets the cookies above. On Google Analytics we have switched off Google Signals and ad personalization, so that data cannot be used to build a cross-device advertising profile of you or to target you with ads.
What we look at is aggregate: which guides get read, which searches come back empty, which counties we have thin coverage in. We do not try to identify an individual visitor, and we do not connect analytics data to a message you send a provider.
We do run one advertising tracker, and we would rather say so here than bury it. We advertise this directory on Facebook and Instagram. The Meta Pixel sets the cookies above and reports back to Meta which of those ads led someone to claim a listing or send a message — without it we are paying for advertising blind. Meta can use what it collects to show you our ads again on its platforms, and to add to the advertising profile it already holds about you.
What it does not get is the contents of anything you typed. We never pass it your name, your email address, your phone number, your message, or which provider you contacted — only that an action of a given type happened on a page. If you would rather not be measured this way, any tracker-blocking browser or extension will refuse it and nothing on this site stops working, and Meta's own ad-preference settings apply on top of that.
Who else sees your information
When you message a provider through the site, that message is reviewed by us before release — partly for spam, partly so a provider can't be pointed at someone who plainly meant to reach a different service. Once released, the provider you contacted receives it so they can reply. Providers on a free listing see a redacted version of your contact details until they upgrade; the message still reaches them.
We share your information with no one else, and we never sell it or rent it to data brokers or lead resellers.
A handful of vendors process data on our behalf in order to keep the site running:
- Supabase — the database that stores listings, messages, and accounts.
- Resend — sends the site's email (activation links, notifications, forwarded messages).
- Vercel — hosts the site and provides the cookieless analytics above.
- Google Analytics — measures which pages get read and how visitors arrive, with Google Signals and ad personalization turned off. See cookies and analytics.
- Meta (Facebook and Instagram) — receives, through the Meta Pixel, the fact that a page view or an action happened on this site, so we can measure our own advertising. It never receives what you wrote or who you contacted. See cookies and analytics.
- Google Fonts — serves the site's two typefaces. Your browser requests them from Google, which means Google sees the request.
- OpenStreetMap and unpkg — supply map tiles and the mapping library on pages that show a map. Both see the request your browser makes.
We may also disclose information if the law requires it, or if it is necessary to investigate abuse of the site.
Where listing information comes from
Provider listings are built from public sources: state licensing records, providers' own public business listings, and information a provider gives us directly when they claim their listing. Ratings and review counts, where shown, come from a provider's public Google listing — we do not write reviews and we do not invent scores. A provider with no reviews shows "No reviews yet".
If you are a provider and something in your listing is wrong, you can claim the listing and correct it, or write to us and we will fix it.
How long we keep it
Messages to providers and to us are kept while they are useful for follow-up and for handling disputes, and are deleted when they are not. Claim records are kept as long as the listing is claimed, because they are the evidence of who claimed it. Sign-in sessions expire on their own. If you want something deleted sooner, ask.
Your choices
Write to hello@rightcaremn.com — from the address you used, where you can — and you can ask us to:
- tell you what we hold about you;
- correct anything that is wrong;
- delete it;
- stop sending you email.
We answer these regardless of which state or country you live in. We aim to reply within 30 days. Note that if you have already messaged a provider, we cannot retrieve what they now hold — you would need to ask them directly.
Security
The site is served over HTTPS. Passwords are never emailed or issued by us: an account is created without one, and the account holder sets their own through a single-use link. Stored passwords are hashed. Dashboards are gated server-side, so signing out or lacking permission means the data is never sent to the browser at all.
No system is perfectly secure, and we won't pretend otherwise. If you find a vulnerability, please report it to hello@rightcaremn.com before disclosing it publicly.
Children
This site is built for adults arranging care — for themselves, for a parent, or as a professional. It is not directed at children under 13 and we do not knowingly collect their information. If you believe a child has sent us something, tell us and we will remove it.
Changes to this policy
When our practices change, this page changes, and the date at the top moves. If a change materially affects people who have already contacted us, we will say so here rather than quietly editing the text.
Contact
Questions about this policy, or about anything we hold: hello@rightcaremn.com, or the contact form. RightCare MN is operated from Minnesota, United States.