Pros on RecordHome-service contractors, from public records

Draft

Privacy policy

This is a draft and is not in force. Counsel review is pending. The sections below are settled and the text under each describes what the site actually does today, so it can be checked rather than taken on faith. Two forms on this site collect contact details: the removal and correction forms reached from a listing. No homeowner request form is live, and none will be before this document is final.

Each section carries two things: the drafted text, and the questions a counsel review has to answer before that text is final. The open questions are published rather than hidden, because a draft that hides what it has not settled reads as finished.

What this site holds about a business

Public-record data only, from two kinds of source: open place data published by Foursquare under the Apache License, Version 2.0, and licensing files published by state boards. The sources, their file dates, their compliance tier, and every modification this site makes are listed on the methodology page.

None of it was collected from the business directly, and none of it was bought. Where a state file publishes a home address because the contractor works from home, a residential screen suppresses the street line, the coordinates, and any personal phone number, and the record publishes with its city only.

A business that claims its listing supplies its own contact details, hours, services, and service area. Those are held separately from public-record data, labeled on the page as provided by the contractor, and removed when the claim is withdrawn.

For counsel review

  • Whether a state license record naming a natural person is personal data under each state privacy act that reaches a national directory, and specifically whether the publicly-available-information carve-out the Texas Data Broker Act borrows covers it.
  • Whether the residential screen's output is a sufficient minimization answer, or whether sole-owner records need a stricter default.

What this site holds about a visitor

Server logs, kept for a period this document will state once retention is settled, covering the request path, the response, a truncated network address, and the user agent. They exist to keep the site up and to find abuse.

First-party analytics recording which page was viewed, which hub or profile it was, and where the visit came from. No advertising trackers, no cross-site identifiers, no data broker pixels, and nothing sold or shared for advertising. There is no third-party script on any page of this site.

For counsel review

  • Log and analytics retention periods, stated per record type.
  • Whether the analytics events, which carry no personal identifier, still require a consent banner in any jurisdiction the site serves.
  • Whether a global privacy control signal needs an honored response given that no data is sold or shared.

What the removal and correction forms collect, and why

A removal request and a correction both collect the requester's name, email address, an optional phone number, the stated relationship to the business, and whatever the requester writes in the free-text fields. Each submission is stored with the date and time, the network address it arrived from, and the browser's user agent, as proof of when the request was made and by whom.

That proof exists for one reason: a request to take a record down, or to change what a public record says, is an assertion, and the site has to be able to show what was asserted and when. The email address is used to verify the request and to reply to it. It is added to no list. It is never used to contact the business for any other purpose, and it is never sold, shared, or handed to any contractor.

The response target is five business days. A verified removal is stored as a suppression keyed to the record and to a fingerprint of the business name plus its city, state, ZIP, and county, and that suppression is retained indefinitely, because it is what stops the record from returning with the next data file.

For counsel review

  • How long an unverified or withdrawn request should be retained after it is closed.
  • Whether the stored network address and user agent should be truncated or hashed once a request is resolved.
  • Whether the retained suppression fingerprint is itself personal data, given that its purpose is to keep a record suppressed.

What a homeowner request will collect, and why

No homeowner request form is live in this release. When one ships it will collect contact details, the property's ZIP code and property type, the trade and the named problem, urgency, whether an insurance claim is involved, and availability windows. Each of those exists to route the request or to gate it, and this document will say which does which before the form goes live.

The property address is not collected beyond what routing needs. Home-service requests are not health data, and nothing on this site collects health data of any kind.

For counsel review

  • The final field list and the stated purpose of each field, before any request form is live.
  • Retention for a request that is never matched, and for one that becomes a booked appointment.
  • Whether the availability windows and the insurance-claim answer need separate handling.

Consent, and how it is withdrawn

Requests reach only contractors who claimed a listing and supplied their own contact details and their own express written consent, captured separately for calls and for texts, with the disclosure text, the timestamp, the network address, and the user agent stored as proof for five years.

This site never solicits a business at a phone number, mailing address, or email taken from a dataset. The single carve-out is a verification callback or postcard initiated by a claim, which uses the number or address on record for verification only and is logged. No text message is sent to anyone in this release.

Consent is withdrawn by replying to any message, by using the withdrawal link in it, or by writing to the address in the last section. Withdrawal stops routing to that contractor and is recorded with the same proof fields as the consent it revokes.

For counsel review

  • The claim-time consent language and the homeowner-side consent language, in one review, before any SMS is sent.
  • Whether named-contractor consent over an ordered set is sufficient in the states carrying a private right of action with per-message damages.
  • The failover window, the cascade depth, and what happens when a set is exhausted.

Who receives data, and who never does

Contact information is never sold, and it is never sent to a business that did not ask for it. There is no lead sale, no data broker relationship, and no advertising partner.

Processors that hold data on this site's behalf are the hosting platform, the database host, and the messaging provider used for verification. Each is bound by contract to use the data only to provide that service. They are named in the final version of this document.

A homeowner request, once one exists, goes to the contractors the homeowner selected by name, and to nobody else.

For counsel review

  • The processor list, with each one named and its role stated.
  • Whether any transfer in that list crosses a border that needs a stated mechanism.

Removal, correction, and suppression

A removal and a correction are verified the same way a claim is, and neither requires a claim. The response target is five business days. A removed URL returns HTTP 410 and the record is suppressed from every later release.

Every confirmation states the refresh cycle for the source in question, so a change is not silently overwritten by the next file, and links the upstream source so the record can be fixed at origin as well.

For counsel review

  • The verification standard for a removal filed by someone who is not the business owner, for example a person whose home address appears on a record.
  • Whether a removal should also propagate a report to the upstream source automatically rather than only pointing the requester at it.

Retention

Stated per source and per record type in the final version. What is settled now: consent proof is kept five years, because that is what makes it usable; suppression records are kept indefinitely, because a suppression that expires stops working.

For counsel review

  • A retention period for every remaining record type: server logs, analytics events, closed intake requests, claim verification logs, and per-source snapshots.

State privacy rights

The rights a national directory has to honor, the process for exercising each one, and the identity verification standard for a request are stated in the final version. The removal and correction forms already deliver the two rights people actually use here, and neither requires an account.

Two counters are kept because two legal thresholds turn on them: distinct homeowners whose data is held, and distinct natural persons in the license layer. Both alert at 25,000 and are reviewed before 50,000. The current values are published on the methodology page.

For counsel review

  • Which state regimes apply at current and projected volumes, and the threshold each turns on.
  • The verification standard for a rights request, and the appeal path when one is refused.
  • The premise that public state license files fall outside the definition of personal data those regimes borrow. It is load-bearing and is named here for that reason.

How to reach a human

A monitored address for privacy questions, and a named person responsible for them, are stated in the final version. Until then, a removal or correction request filed from a listing reaches a person and gets a reply inside five business days.

For counsel review

  • The published contact address, and whether a postal address is required in any jurisdiction the site serves.

Where the facts behind this document are

Every source, its cadence, its compliance tier, the screens and their measured precision, and the counters named above are on the methodology page. The terms of use are a draft on the same footing as this one.