Why we will never sell data

When a family walks into a front office, they bring more than a form. They bring a lost lease, a diagnosis, a lost job. The record that holds those facts is not inventory. It was handed over at a hard moment, for one purpose: getting help.

So we say it plainly. Decurion will never sell, rent, or trade the data organizations keep with us. Not in aggregate, not “anonymized,” not to a partner with a good pitch. This essay explains why that is a design commitment and not only a line in a contract.

The quiet second product

Across much of the software world, a person’s information is treated as a second product. The first product is the service you can see. The second is everything that can be learned about you while you use it, packaged and sold to someone you will never meet.

For a shopping app that is uncomfortable. For an organization that serves people in need, it is a betrayal. The people in these records rarely chose the software. They chose the office because it was the one that could help. They did not agree to become a data set, and many of them have no realistic way to say no.

When a family’s information is treated as a product elsewhere, the harm is hard to see and impossible to undo. A request for rent help becomes a signal to a lender. An intake note about a disability becomes a marketing segment. None of it is visible to the family, and none of it can be taken back.

What never means in practice

• We do not sell, rent, license, or trade the data organizations keep with us, in any form, to anyone.
• We do not share data with advertisers, data brokers, or marketing partners.
• We do not use one organization’s records to train tools or build products for another.
• We collect what the work requires and nothing more.
• Unless the law requires otherwise, data moves between organizations only with consent the person can see, and that consent is recorded.
• Every organization can export everything, whenever it asks, without a fee.

Each of these choices costs us something. A company that sells data has a second source of revenue, and a reason to collect more than it needs. We would rather earn our keep the simple way: by building modules that organizations pay for because they work.

Useful, and held carefully

Decurion keeps one record per person, so nobody has to repeat the same details at every desk. A single record is useful, which is exactly why it needs firm limits. The same design that saves a case worker an hour could, in the wrong hands, become a profile. We keep that usefulness pointed in one direction.

That means access is granted by role and logged by default. Every view and every change leaves a trail an administrator can read. Sharing between organizations happens through consent-based sharing: the person sees what will be shared and with whom, agrees, and the agreement is recorded. Where health information is involved, our safeguards are aligned with HIPAA.

Data that helps people decide

Refusing to sell data does not mean letting it sit unused. Inside an organization, the record should help staff make better decisions about the people in front of them: who has waited longest, which applications are missing a document, where a program will run short before the month ends.

Optio, the assistant, can surface those patterns and draft the report. A person reads it and decides what to do. The data stays inside the organization that collected it, working for the people it describes.

Why we put it in writing

Promises like this are easy to make when a company is small and harder to keep as it grows. We write them down for that reason. Our data commitments are part of our ethics program, reviewed with every release, and open to anyone who wants to raise a concern. If we fall short, we expect to be told, and we expect to fix it and say what changed.

What it means for your organization

If you choose Decurion, you can tell the people you serve something simple and true: the information you give us is used to help you, and it is never sold. You can answer a board member’s question about data without a qualifier. And if you ever decide to leave, your records leave with you, complete and readable, on your schedule.

That is the whole arrangement. You trust us with the record. We keep it safe, keep it useful, and keep it yours.