Set a Privacy-Aware In-Home Access Protocol

01

Send a minimum-necessary pre-arrival notice

The customer should know who is expected before the door opens. Send the worker's name, current photo, role, company, arrival window, approved task, and a verified company contact for questions. Ask the customer to confirm the appointment and identify the person authorized to approve changes. Do not include a worker's private screening data or more personal information than identification requires.

If the assigned person changes, send a new notice and obtain confirmation; a substitute should not rely on the prior worker's approval. Keep the notice available to the dispatcher and worker without exposing it broadly. The idea comes directly from McDougald's description of clients being able to see who is arriving, but the protocol adds a confirmation and data-minimization boundary.

“They can look specifically at who's coming to their house. It has the photo.”

Cori McDougald, episode timestamp 06:22

02

Match the person, task, and time at the door

At arrival, the worker should state their name, company, assigned task, and the authorized contact. The customer or designated representative matches that information to the pre-arrival notice before entry. A badge is useful when it supports that match. It is not evidence that the wearer is safe, free of criminal history, qualified for every task, or entitled to enter any space.

The episode suggests a badge may keep others from questioning the worker. Reverse that assumption: household members and authorized representatives should always be free to question, pause, or verify access. If identity, scope, or authorization does not match, step back, contact dispatch through a known channel, and wait. Do not pressure someone to admit a worker because the person looks official.

“You have your badge, nobody's going to question what you're doing there.”

Cori McDougald, a claim this protocol explicitly limits, episode timestamp 07:50

03

Define the access envelope before work starts

Create an access envelope with four fields: approved spaces, approved items or systems, approved actions, and the person who can expand scope. Apply least privilege—the worker receives only the access necessary for the assigned task and only for the required time. The NIST definition of least privilege comes from information security, but the boundary is useful for physical and digital access design too.

Walk through the envelope with the customer or authorized representative. If the work reveals another room, item, account, image, or action, stop and request approval through the agreed channel. Conducting an in-home proposal should not silently become permission for unrelated inspection, photography, movement, or follow-on work.

04

Treat personal items as a separate permission

McDougald notes the sensitivity of touching a customer's personal items. Before handling property, confirm what may be touched, moved, opened, photographed, discarded, or left in place. Use category descriptions in the work record rather than inventories of private belongings. When a choice is personal or unclear, leave the item and ask the authorized person.

Do not record client identities, addresses, household staffing, access details, valuables, diagnoses, disabilities, mental-health labels, finances, schedules, or other private facts in a general job note. If a legitimate business or legal need requires sensitive data, use the approved restricted system, retention period, and access list. The ordinary closeout should reveal as little as possible.

“You're touching their personal items.”

Jim Klauck, episode timestamp 12:26

05

Use layered controls instead of a safety badge

The recording presents background checks, badges, and NDAs as trust signals. Each has a narrow role and none proves safety. A lawful background-check process evaluates particular records under applicable rules; a badge supports current identity matching; an NDA creates contractual duties. They do not guarantee conduct, eliminate supervision, establish technical qualification, or show that every employment decision was lawful.

Layer controls: verified hiring and role records, current training, supervision appropriate to the task, pre-arrival identity, scoped access, customer confirmation, check-in and check-out, incident reporting, and restricted records. Current EEOC background-check guidance underscores that employment use is regulated and fact-specific. Use qualified employment and legal review.

06

Plan for unexpected people and changed conditions

A worker may meet someone who did not receive the notice, find the authorized contact absent, or discover that the requested task has changed. The protocol is stop, create distance from private areas or items, contact the verified company channel, and wait for authorization. Do not disclose why another household member hired the company or what the worker has already seen.

Dispatch should keep a concise exception record: time, assigned worker, category of mismatch, person who authorized the resolution, and next action. Avoid unnecessary narrative about the household. If there is an immediate threat, suspected crime, medical emergency, child or vulnerable-person issue, or other reportable event, follow current emergency policy and qualified legal guidance rather than improvising from this article.

07

Close the job and revoke access

At closeout, confirm the approved task status, note any item intentionally left untouched, return physical credentials, revoke temporary digital or entry access, account for company equipment, and tell the customer how to report a concern. Do not repeat or display the credential in the closeout record. If images were authorized, retain only those required by policy and restrict them to the proper role.

Document the process in the service system with neutral categories, then apply the retention schedule. Documenting a home-service business is valuable only when access is controlled and unnecessary details expire. The NIST Privacy Framework is a current reference for organizing privacy risk; implementation still needs qualified security, privacy, employment, and legal review.

08

Test the protocol without entering a home

Run a tabletop exercise with a dispatcher, manager, and field worker. Test a substituted worker, an unavailable authorized contact, an unexpected room request, a personal item outside scope, and a credential that should expire at closeout. For each scenario, the team must identify who can decide, what minimum record is needed, and when qualified review or emergency policy takes over.

Score the system, not the customer's private circumstances: notices sent accurately, confirmations received, mismatches stopped, scope changes authorized, credentials revoked, records minimized, and concerns routed on time. Fix one weak handoff before live use. A premium service explanation earns credibility through visible process, not through claims that a badge or screening product guarantees safety.