No passwords to steal
You sign in with your phone number and a one-time code. Covecare will never ask you for that code.
Security
Your documents, pay and data, protected.
Covecare holds licenses, background checks and pay for people who work in healthcare. Here's how we look after them.
Access enforced by the database
Every record is guarded by rules in the database itself: you see your own data, and a facility sees what relates to its shifts.
Private credential storage
Documents sit in private storage and open only through short-lived links. Your date of birth is kept apart and never shown to facilities.
Payments through Stripe
Card and bank details are entered with Stripe and never stored by Covecare.
Background checks through Checkr
Background checks are run by Checkr, a specialist provider; Covecare receives the result.
Location, only when it matters
Your location is read when you clock in or out, or when you ask the app to use it to find shifts near you.
Report a concern
Found a vulnerability or something suspicious?
Tell us what you found and we'll look into it straight away. Please don't access or change other people's data while testing.
- What happened, and the page or screen it was on
- Steps to reproduce it, if you can
- The impact you think it could have
- Your device and browser, and screenshots if you have them
Keeping your account safe.
- Never share your sign-in code, even with someone who says they're from Covecare
- Only upload documents in the Covecare app or on mycovecare.com
- Tell us quickly about unexpected messages or sign-ins you don't recognise