Server-verified GPS on crew clock-in and job-site photos (Pro and Scale)

The reason this took us a year to ship: location data is the single highest-blast-radius signal a contractor SaaS can collect. Most field-service tools default to continuous background GPS, which means the office can pull up a live map of every truck at any moment of the day. That capability is misused often enough that we refused to build it. We waited until we could ship event-scoped server verification instead — capture only at clock-in, clock-out, and photo-attach events, verify against the job address, then discard the raw lat/long.

On the homeowner side, the change is small and concrete. The portal now carries an “On site” pill while the crew is clocked in on that specific job, with a mono-caps elapsed-time stamp underneath (e.g. `ON SITE · 1H 24M`). When the last crew member clocks out, the pill flips to the final timestamp. No live position dot, no map, no inference about where the truck is now or where it’s going next.

On the contractor side, the timesheet ledger now carries a `VERIFIED` stamp on every clock event whose captured location is within 250 m of the registered job-site address; events outside that radius (lunch breaks, supply runs, errors) carry an `OFF-SITE` stamp instead and don’t flow into the verified hours total. Disputed timesheets — common in trades that bill T&M — now have a server-side audit trail that closes the conversation in minutes instead of hours.