No phone, no email, no ID, no account. At intake an advocate prints a claim card: a record number, three words, and four digits. Bring it to any record kiosk on the map, or an advocate brings the kiosk to you.
Enter the three words and the four digits from your card. No name, no phone, no email, no ID. We never stored the words, so nobody here can look them up or hand them to anyone.
Any site on this map with document help can issue a card. It takes about three minutes and costs nothing. You do not need ID, an address, a phone, or an email. An advocate writes down what you are asking for, reads it back to you, records your consent, and hands you a paper card with three words and four digits on it.
Bring the card back to any partner site, any kiosk, or any borrowed phone or library computer. Typing the words proves you are the same person who filed it, without proving who you are. If you lose the card, no one can recover it for you, but any advocate who knows you can verify you in person and issue a new one, which moves the record to the new card.
Generate a card the way an advocate would, so you can see what a person walks away holding.
Only the sample sites below can sign in here. Nothing published through this modal routes anyone in real life. See the privacy notice and provider security baseline before adapting this demo.
Public: this map contains composite/de-identified asks, exchanges, service-directory facts, and neighborhood-level metrics. Private: intake notes, recovery inputs, provider credentials, protected client details, and audit records belong behind an authorized provider system and are never part of this public artifact. Do not enter names, dates of birth, ZIP codes, health information, victim-service information, or other protected data here.
Every account is a composite, built from advocate intake notes across multiple people. No entry describes a real, identifiable individual. No precise location exists anywhere in the data. Pins snap to a neighborhood centroid, and offsets inside a neighborhood are for legibility only.
On load this page generates an ECDSA P-256 keypair in your browser with WebCrypto. Every record and every message is canonicalized to a fixed field order, hashed with SHA-256, and signed. Verify re-canonicalizes the live record and re-checks the signature, so an edit made after sealing cannot pass. Nothing leaves your device: no network requests, no fonts, no map tiles, no analytics.
Friction points are places where two groups of neighbors collide. Anyone with an address can post to a place, never to a person. Posts route through advocate review that strips names and locations before publication. People living outside post only through advocate-mediated intake with recorded consent, because an open channel would let anyone speak in their name and would ask them to identify themselves in public to be heard.
Most sites are real organizations, researched from official sources (city and county pages, RTFH/211 San Diego, and each org's own site) — identity, address, hours, intake, and published bed capacity are sourced, with a source link on every real site's card. A few sites marked sample account are fictional, kept only so the provider-tools demo below has something to sign into without attaching a fabricated action to a real organization. Bed availability is simulated for every site, real or sample, on a feed that never reads from a live system — do not route anyone using this page. In a real deployment each count would come from a coordinated-entry system and be signed on arrival, which is the point: a signed count cannot be revised after the night it described.
Requiring an account to use a service that helps people replace lost documents would repeat the exact trap the records describe. So there is no account. At intake an advocate prints a claim card: a record number, three words, and four digits. Those are stretched with PBKDF2 into a key that signs the holder's updates, so the system can tell it is them without ever storing a name, a number, or a password. Any site marked Record kiosk can open a record. If the card is lost, and it will be, an advocate restores access in person and the restore is logged and signed.
Not a directory of people. Not a live feed. Not an accusation against any named organization. Figures marked ALLEGED are unverified placeholders, excluded from all signed data and every metric, and must be sourced before publication.