No phone, no email, no ID, no account. At intake an advocate prints a claim card: a record number, three words, and four digits. Bring it to any record kiosk on the map, or an advocate brings the kiosk to you.
Enter the three words and the four digits from your card. No name, no phone, no email, no ID. We never stored the words, so nobody here can look them up or hand them to anyone.
Any site on this map with document help can issue a card. It takes about three minutes and costs nothing. You do not need ID, an address, a phone, or an email. An advocate writes down what you are asking for, reads it back to you, records your consent, and hands you a paper card with three words and four digits on it.
Bring the card back to any partner site, any kiosk, or any borrowed phone or library computer. Typing the words proves you are the same person who filed it, without proving who you are. If you lose the card, no one can recover it for you, but any advocate who knows you can verify you in person and issue a new one, which moves the record to the new card.
Generate a card the way an advocate would, so you can see what a person walks away holding.
Only the sample sites below can sign in here. Nothing published through this modal routes anyone in real life. See the privacy notice and provider security baseline before adapting this demo.
Public: this map contains composite/de-identified asks, exchanges, service-directory facts, and neighborhood-level metrics. Private: intake notes, recovery inputs, provider credentials, protected client details, and audit records belong behind an authorized provider system and are never part of this public artifact. Do not enter names, dates of birth, ZIP codes, health information, victim-service information, or other protected data here.
Every account is a composite, built from advocate intake notes across multiple people. No entry describes a real, identifiable individual, and no precise location exists in any request record — pins snap to a neighborhood centroid, and offsets inside a neighborhood are for legibility only. Service and shelter sites are a separate, unsigned layer plotted at their real public street address, since those are institutions rather than people.
On load this page generates an ECDSA P-256 keypair in your browser with WebCrypto. Every record and every message is canonicalized to a fixed field order, hashed with SHA-256, and signed. Verify re-canonicalizes the live record and re-checks the signature, so an edit made after sealing cannot pass. Nothing leaves your device: no network requests, no fonts, no map tiles, no analytics.
Friction points are places where two groups of neighbors collide. Anyone with an address can post to a place, never to a person. Posts route through advocate review that strips names and locations before publication. People living outside post only through advocate-mediated intake with recorded consent, because an open channel would let anyone speak in their name and would ask them to identify themselves in public to be heard.
Most sites are real organizations, researched from official sources (city, county, RTFH/211 San Diego, and each organization) — identity, address, hours, intake, and published capacity are sourced, with a source link on every real site's card. This map has no live bed-availability feed. Any availability-looking numbers are simulated demo values and must not be used to route anyone; call the provider or coordinated-entry hub directly. A real deployment would need an authorized operational integration with its own privacy and access controls.
Requiring an account to use a service that helps people replace lost documents would repeat the exact trap the records describe. So there is no account. At intake an advocate prints a claim card: a record number, three words, and four digits. Those are stretched with PBKDF2 into a key that signs the holder's updates, so the system can tell it is them without ever storing a name, a number, or a password. Any site marked Record kiosk can open a record. If the card is lost, and it will be, an advocate restores access in person and the restore is logged and signed.
Not a directory of people. Not a live feed. Not an accusation against any named organization. Figures marked ALLEGED are unverified placeholders, excluded from all signed data and every metric, and must be sourced before publication.