Security at GenAcre
How we protect family accounts, facility data, and logins — without making everyday search hard.
Not a government site
GenAcre is an independent private platform. We are not Medicare.gov, not CMS, and not a state agency.
We do not enroll people in Medicare or sell Medicare Advantage plans. For official Medicare information, use Medicare.gov.
GenAcre is a private marketplace for families: private messages to one community, starting rates, and photos the community controls. Partner occupancy tools are not the family product.
Two-factor authentication (best free path)
No account needed to search or call communities. Two-factor applies only when you create or use a signed-in account.
We use a free authenticator app (Google Authenticator, Microsoft Authenticator, Authy, or 1Password) — not text-message codes. That is the best balance of security and ease for GenAcre:
- Stronger than SMS — SMS can be stolen with SIM-swap scams
- Stronger than email-only codes — if email is hacked, SMS/email OTP falls too
- Free — no paid texting vendor for every login
- Easy — about one minute once; later just type 6 digits
- Backup codes — if you lose your phone, one-time recovery codes still get you in
When you create a signed-in account — family or facility — GenAcre requires that app. Setup is about one minute, one time. Every later sign-in: email + password + the 6-digit code on your phone.
- Families: Signed-in family accounts use email, password, and a 6-digit authenticator code — setup once, like a bank.
- Facilities: One-time phone setup with a free authenticator app. Then email, password, and a 6-digit code — like a bank, configured once. Only your team’s login can change your community’s beds, rates, and photos.
We never ask for your password or authenticator codes by email or phone. Official support is listed on the site contact email only.
Beta mode (not “unsafe mode”)
GenAcre is in a Brevard County beta: limited geography and founding partners. Security controls stay on — HTTPS, hashed passwords, authenticator MFA, rate limits, and facility isolation — the same class of protections businesses use before a wide launch.
Facility data you control
- Only your facility admin account (after 2FA) can edit beds, rates, and photos
- Other communities cannot see or change your private dashboard data
- Family inquiries go to your inbox — not a shared lead marketplace blast
- GenAcre staff never ask for your password or authenticator codes
Changing beds, rates, photos, or profile details requires a verified two-factor session for that facility's admin — not a public form.
Facility FAQ — security & storage
Short answers partners can share with leadership. Also on the For facilities page.
Where is our data stored?
- On professional cloud infrastructure (not a laptop under someone’s desk)
- The live app runs on encrypted web hosting (HTTPS)
- The database is a managed PostgreSQL service with encryption at rest
- Partner photos use secure cloud object storage when enabled
Who can see our beds, rates, and inquiry inbox?
- Only people signed in as your facility admin (after password + authenticator code)
- Facility A cannot open Facility B’s private dashboard
- Families see public listing fields you publish (e.g. rooms you mark Open) — not your full admin tools
- GenAcre founders/ops may access systems for support, verification, and safety — never by asking you for your password
Who sees family contact information?
- Only families who chose to message your community
- That inquiry lands in your GenAcre inbox (and email when email is configured)
- It is not sold as a shared multi-facility lead list
- Use family contact details only to respond about care and tours
How do logins stay safe?
- Work email + password + free authenticator app (6-digit code)
- Setup is about one minute, one time; then code at each sign-in
- Passwords are stored hashed — GenAcre cannot read your plain password
- Authenticator secrets are encrypted at rest
- We never ask for your password or codes by email or phone
Is beta less secure than a full launch?
- No — beta means limited geography and partners, not “security off”
- The same controls apply: HTTPS, MFA, role isolation, rate limits
- We improve security continuously before wider marketing
- Founding partners help us prove the model while controls stay on
What about photos and public listing content?
- You upload only content you have rights to use
- New photos are reviewed before they go live for families
- You control rates and profile fields from your dashboard (after MFA)
- Public directory facts (name, address, licensing) may appear as part of the marketplace
What if we leave GenAcre or need help?
- Email the official contact on the GenAcre site (genacre@gmail.com)
- Do not send passwords in email
- Partner agreement (lawyer-finalized) will cover termination and data handling at go-live
- Report suspected account issues immediately so we can lock access
Are you HIPAA compliant / do you store patient charts?
- GenAcre is built for marketplace and partner operations data (listings, beds, family inquiries you choose to receive)
- Do not paste full medical records into free-text fields unless your counsel and GenAcre have agreed a clinical path
- Hospital planner tools use a separate login with MFA
- We do not claim “HIPAA compliant” for the beta unless your attorney confirms that status for your use case
Hospital discharge planners
- Separate planner login (not the family or facility portal)
- Authenticator 2FA required every session after setup
- Designed for bed availability and facility profile data — not a dumping ground for full patient charts
- Written hospital agreements before real clinical workflows expand
What we also do under the hood
- Passwords hashed (never stored in plain text)
- Authenticator secrets encrypted at rest
- HTTPS on the live site
- Rate limits and login lockouts against guessing
- Role isolation so Facility A cannot manage Facility B
- Private inquiries go to one community you choose — not a shared lead pool
How you can check we're being careful
- Look for the lock icon in your browser — the site uses HTTPS
- Read our Privacy Policy — we say we do not sell personal information
- After you create an account, GenAcre asks for an authenticator app — that is intentional
- We will never email or call asking for your password or 6-digit codes
- Facility partners only see families who messaged their community
- Questions or a security concern: genacre@gmail.com