Security & privacy

Their health information is sacred. We built like it.

MayLou holds some of your family's most sensitive information. That responsibility shapes every engineering decision, every policy, and our entire business model.

How we protect it

Private by design from day one.

We aren't waiting to be required to do the right thing. MayLou is engineered to the standard health systems demand.

Encrypted, always

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Backups are encrypted. There is no unencrypted path through our system.

Access by role

Your family decides who sees what. An aide can confirm shifts and add notes without seeing family documents. Every action — a med change, a check-off, a new note — is written to the shared record, so your family can always see who did what, and when.

Independent verification

Our infrastructure runs on BAA-covered cloud providers, and we are building toward SOC 2 Type II certification — the audit standard health systems require of their vendors.

Consent comes first

The person you care for is a person, not a profile.

Caring for someone doesn't automatically grant the right to their medical information — and it shouldn't. MayLou is built around consent that is actually documented: every account holder agrees to our terms and privacy policy before they can enter (recorded, versioned), our terms require that whoever adds someone's information has the authority to do it, and their own login shows them everything the family sees — nothing about them is hidden from them.

When medical-records sync arrives, records will flow into MayLou only through patient-directed access — the same federal framework (TEFCA) that lets patients share their own records with apps they choose — authorized by the person themselves or their legal proxy.

1. They consent — or their proxy doesOur terms require that whoever adds someone's information has the authority to do it, and MayLou records your healthcare proxy or power of attorney documentation.
2. Consent is stored and visibleThe documentation lives in the document vault, where your whole family and the person receiving care can see exactly what was agreed.
3. Consent can be changedAccess can be narrowed or revoked at any time. Dignity means the door locks from the inside.
Our commitments

The promises we'll be held to.

The next update your family needs is a link to MayLou.

Set up your family's care hub right now — it takes about five minutes.

Create your free account

Free to start · No credit card · Your family joins from a text link