Coordination
Care circle app: who sees what, and who decides
A care circle app gives several people access to one parent’s record, and the work is deciding who sees what. Most families need four roles: a writer, family readers, a paid helper who writes daily notes, and a clinician who receives a summary. One shared password is not a care circle; it is a leak waiting to happen.
By Easikin · · 8 min read
A care circle is a list of people, not a group chat
The phrase sounds warm, and that is the problem. A care circle is not the family WhatsApp group with a better name. It is a defined set of people, each with a defined slice of one parent’s information, and a rule for how someone joins or leaves.
The distinction matters because a group chat has one permission level: everything, forever, for everyone who was ever added. A care record cannot work that way. The helper needs the medication list and the schedule. She does not need the note about the will, or the argument between siblings about money.
The four roles worth distinguishing
Elaborate permission schemes go unused. Four roles cover almost every household, and each one can be explained to the person in a sentence.
| Role | Needs to see | Should not be able to | Who invites or removes |
|---|---|---|---|
| Writer (usually the adult child doing the coordinating) | Everything: notes, medication list, appointments, documents | Nothing is withheld — but every change is attributed and dated | Themselves; agreed with the parent |
| Family reader (sibling, spouse, aunt) | Daily notes, appointments, medication list; can add their own notes | Edit someone else’s note, or change the medication list | The writer, with the parent informed |
| Paid helper | Today’s schedule, the medication list, the tasks and what finished looks like | Clinical notes, financial details, the family’s private notes | The writer; removed on the last day of the contract |
| Clinician or nurse | A printable summary: what changed, current medication, recent events | Browsing the full record, or writing into the family’s notes | The writer, per episode of care |
| The parent | Whatever they ask to see; at minimum, who is in the circle and what is recorded about them | Nothing — access is theirs to grant and withdraw | Themselves |
The last row is the one families forget. The record is about a person who is still here, and it is their information before it is anyone else’s.
Ask the parent before you invite anyone
Most care circles are built during a crisis, by an adult child who is exhausted and technically in charge of nothing. The invitation goes out first and the conversation happens later, if at all.
Reverse that. Ask the parent what may be shared, with whom, and for how long. If the parent can follow the question, their answer decides it, even when the family disagrees. A refusal is inconvenient; overriding it is a different category of problem, and one that damages the arrangement more than the missing note does.
Where a parent cannot follow the question, the family is relying on someone else’s judgement — a clinician’s assessment of capacity, or a legal arrangement such as a guardianship order. That is a matter for a doctor and a lawyer, not for a family vote in a group chat, and it is worth being honest that this is the harder case rather than pretending the app settles it.
The legal frame is not exotic. Health information is personal data, and in Hong Kong the Personal Data (Privacy) Ordinance (Cap. 486) governs how it is collected, used and shared. The Office of the Privacy Commissioner for Personal Data publishes guidance for data users. An app is a tool inside that frame, not a way around it.
The founding note: five lines the circle starts with
Every circle should open with one note that explains itself, written before the first invitation goes out. It takes ten minutes and prevents the two most common arguments: who decided this, and why can’t I see it.
- Who this record is about, in the family’s own words, including what the parent wants to be called.
- What the parent agreed to share, and with whom — recorded in their words if possible.
- Who the writer is, and who the deputy writer is when the writer is ill or away.
- What is deliberately not in the record: money, the will, old grievances. Naming the exclusion stops people looking for it.
- How someone leaves the circle, including when a helper’s contract ends.
What actually goes wrong with shared access
The failures are rarely technical. They are social, and they repeat across families.
| What happens | Why it happens | Fix |
|---|---|---|
| One login shared by everyone, because inviting people felt like a chore | Setting up roles takes ten minutes nobody had during the crisis | One role per person, set up in the first week; a shared login is a decision to have no record of who wrote what |
| A sibling reads a note and reacts to it in the group chat instead of the record | The record and the conversation live in different places | Keep decisions in the record, with the decision and the date; discuss in the chat, then write the outcome down |
| The helper is given access and never uses it | The interface is in a language she does not read, or the app demands a folder choice before saving | Test the invite on the person, not on yourself; capture must be one tap |
| Access is never removed when someone leaves | Nobody owns the list, so it only grows | The writer reviews the member list on the first of the month — one minute, one decision |
Removing access is part of the design
A helper finishes her contract, a sibling steps back after an argument, a nurse’s involvement ends when the episode of care does. Each of those is a normal ending, and each one has to be an action rather than a drift.
The practical rule is to remove access on the day, not at the end of the month. A person who has left the household should not be able to read tonight’s note, and — just as importantly — should not be able to write one that the next person will believe.
Where the record holds a history, removal has to be considered against continuity. The note a departing helper wrote last Tuesday is evidence of what happened; the access she had to write it is not the same thing as the right to keep reading. Most tools distinguish the two. If yours does not, export the summary before you remove her, so the family keeps the record even as the access ends.
Does a circle need a clinician in it?
Not routinely, and not permanently. A clinician needs a summary at the point of care, not a login for the year. The useful pattern is an export: a one-page summary of what changed since the last visit, the current medication list, and the questions the family wants answered.
That is also the honest limit of what a family record can do. It documents what the family observed and decided; it does not become part of the clinical record, and no clinician is obliged to read it. Where the two disagree, the clinical record wins — and the family’s note is still the thing that tells you when the disagreement started.
For families spread across cities or countries, the circle is often the only shared reality. Caregiving from a distance sets out what a remote member can genuinely own, and what has to be delegated with trust rather than supervision.
Questions families ask about care circles
- How many people should be in a care circle?
- As many as genuinely contribute, and no more. Four to six is common: one writer, two or three family readers, the helper if there is one, and the parent. A circle of twelve is usually a mailing list with anxiety attached.
- Should the parent be able to see everything?
- The default answer is yes, with narrow exceptions agreed in advance — for example a note about a surprise visit, or a safety concern being assessed. Covert monitoring is a different relationship, and it should be named as one rather than slipped in as a feature.
- What if a sibling refuses to use it?
- Then the record still works: the writer keeps it, and the sibling receives a weekly summary by whatever channel they do use. The point of the circle is that the record exists, not that everyone converts.
- Is a care circle the same as a care plan?
- No. A care plan is the clinical or service document that says what care is needed and who provides it. A care circle is the family’s own coordination around that plan. They overlap in content and should not be confused in authority.
Where this comes from
The permissions model here is administrative; the legal sentence rests on the Personal Data (Privacy) Ordinance (Cap. 486) and the guidance published by the Office of the Privacy Commissioner for Personal Data. Nothing in this article is a substitute for advice on capacity, guardianship or a specific family’s legal position.
Easikin is an SI (Superintelligence) · AI (artificial intelligence) caregiving companion app for families and care teams: one parent’s notes, medication list and appointments in one shared record, with access set per person rather than per group chat. If you are still choosing the tool, what a caregiver app for elderly parents must do is the checklist to apply first.
Explore more
- What a caregiver app for elderly parents must do — the six tests, including permissions
- Caregiver handover notes: the five-line format — what the circle reads at a change of shift
- Caregiving from a distance — what a remote member can own, and what to delegate
- How to organise caregiving information — the structure the circle shares
- Easikin, the caregiving companion app — one record, access per person
- The Easikin caregiving blog — the rest of the practical guides
- SilverGuard Technologies Limited — the parent company behind Easikin
- Legaris, a family crisis-readiness app — the documents a circle should be able to find
- Sanospark, cognitive training for older adults — something the circle can do with the parent, not about them