Send a security report
Email support@nurseathome.pk with the affected public address or app version, a description, the steps to reproduce and the possible impact. Use a minimal example with fictional data.
Do not include patient records, identity numbers, passwords, access tokens or payment details. If sensitive evidence is essential, ask us to agree an appropriate transfer method first.
Reporting scope
Reports may concern the Nurse at Home public website, mobile app, API or operations console. A provider’s own systems and third-party services are outside our authority.
This reporting policy does not authorize testing. Do not access another person’s account or data, disrupt service, bypass access controls, send unsolicited messages or perform destructive tests. Report a suspected issue using the information already available to you.
How reports are handled
The support contact routes security reports to the responsible team for assessment. Include a reply address if you want a response. We have not announced a guaranteed response time, bounty programme or public recognition programme.
Please allow the team to assess and address a report before publishing exploitable details. We may ask for clarification using a fictional reproduction.
No public encryption key is currently advertised. Its absence does not establish that email transport is unencrypted. Do not send sensitive evidence until a suitable channel has been agreed.
Machine-readable security contact
For privacy rights or an incident affecting your own account, use Contact and the privacy policy. In an emergency, use the emergency services rather than this inbox.