Server-Verified GPS, Without the Surveillance Tax

Every contractor we talk to wants the same two things from field software, and they pull in opposite directions. They want proof — that the crew actually showed up, that the photo was actually taken at the job, that the timesheet actually reflects reality. And they want their crews to not feel surveilled, because the best crews have options and won't work under a GPS dot that follows them home.

Most field-service tools solve the first problem by ignoring the second: a live-location map that tracks the whole crew, all day, everywhere. We think that's the wrong trade. Today we're shipping the version we think is right: server-verified GPS on clock-in, clock-out, and job-site photos for Pro and Scale — and nothing else.

What actually happens

When a crew member clocks in on a job, clocks out, or attaches a photo, three things happen at that exact moment:

• The device requests a single location fix. Not a stream. Not a subscription. One reading, tied to one event.
• Our server compares that reading against the job-site address you already have on file for the job.
• The timesheet entry or photo gets a verified stamp. If the reading is far from the job site, it's flagged — not rejected — so you can see it on the office side and make a call.

That's the whole loop. Outside those three events, we don't know where the crew is, and we're not asking.

Why server-verified matters

The field has a long history of “GPS clock-in” that runs entirely on the device. A crew member can fake it a dozen ways. If the verification doesn't happen on a server you control, against an address you control, it's theater.

By doing the check server-side against the job address, we can give you something that's actually defensible when a homeowner disputes a visit, when insurance asks for proof of work, or when you're trying to figure out why two hours on Tuesday don't match the photo timestamps.

The homeowner gets a small, honest signal

Inside the homeowner client portal, while at least one crew member is clocked in on their job, a small “On site” badge appears on the project timeline. It disappears when the last crew member clocks out.

That's it. Not a map. Not a named technician. Not an ETA widget that's wrong 40% of the time and makes your phone ring when it is. Just an honest indicator that the crew has started, so the homeowner knows work is actually happening and you don't get the “are they coming?” text at 10:47 AM.

What we deliberately didn't build

• No live-location map of your crew. We don't stream or store continuous positions.
• No driving telemetry. We're not a fleet tool. We're not scoring braking events.
• No background tracking when the crew is off the job or off the clock. The phone isn't reporting to us.
• No homeowner-facing technician location. Homeowners see a badge, not a dot.

If you need a fleet-tracking product, this isn't one, and we don't think it should be. If you want proof of attendance tied to events you already care about, it is.

Where it shows up in the product

• Timesheets: Each clock-in and clock-out carries a verified / flagged marker and the distance from the job site at the moment of the event.
• Photos: Job-site photos attached from the field carry the same stamp, so the photo doc isn't just a timestamp — it's an event tied to an address.
• Client portal: The “On site” badge appears on the homeowner's project view whenever at least one crew member is clocked in on that job.

Plans and rollout

Server-verified GPS on clock-in, clock-out, and job-site photos ships today on Pro and Scale. The “On site” homeowner badge ships on the same plans, as part of the existing client portal. It's on by default for new jobs; admins can toggle photo-level GPS on or off per company from settings.

Starter plans keep clock-in and photo upload exactly as they were, without the server-side verification layer.

The bet

The bet here is simple. Proof-of-presence and privacy aren't a trade-off if you scope the collection correctly. Ask for location at the moment of the event, verify it against the address you already have, show the homeowner a tasteful signal, and leave the rest of the day alone. That's the version of GPS we'd want if we were running the crew, and it's the version we've shipped.