Product security
How long the RemindMeVoice button receives security updates, and how to tell us about a security problem. This page is provided under the UK's Product Security and Telecommunications Infrastructure (Product Security) regime.
Security update support period
The RemindMeVoice button will receive security updates until at least 31 July 2027. We review and expect to extend this date every six months for as long as the RemindMeVoice service operates — the date shown here is a minimum, not a cut-off plan.
Updates are delivered automatically over Wi-Fi — you don't need to do anything. The button checks in with our servers and installs updates on its own; each update is authorised by a cryptographically signed instruction from our servers and delivered over an encrypted connection.
Passwords and device security
Every button uses its own per-device credentials — there are no shared or default passwords. The device has no camera and no always-on microphone: our firmware never records audio, and the microphone the hardware carries can be switched off entirely with a physical switch on the device itself. Its outbound connections go only to our servers, encrypted, and its messages are individually signed so our servers can tell genuine devices apart from impostors.
Reporting a security issue
If you believe you've found a security vulnerability in the RemindMeVoice button, app, website or service, please tell us:
- Email security@remindmevoice.com.
- Include what you found, where (which site, app page or device behaviour), and how to reproduce it.
- If you can, include the impact you believe it has.
What you can expect from us:
- An acknowledgment within 5 working days.
- A status update at least every 14 days until the issue is resolved, and a note when it's fixed.
- Credit for the find if you'd like it (we don't run a paid bug-bounty programme).
We support good-faith security research: if you make a genuine effort to avoid harming our users — don't access or change other people's data beyond the minimum needed to demonstrate the issue, don't disrupt the service, and give us reasonable time (90 days) to fix an issue before telling anyone else — we won't take legal action against you for the research. We can't authorise testing against the third-party platforms we build on (such as Google or Stripe) — their own rules apply there.
Statement of compliance
A statement of compliance under the Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 2023 accompanies every RemindMeVoice button. Manufacturer for the purposes of the regime: Cornerwise Studio Ltd (company no. 17248795), 82a James Carter Road, Mildenhall, IP28 7DE.