Introduction
This page lists the external service providers Shield works with to operate the service. All providers operate subject to confidentiality and data-processing agreements and are required to process data only on our instructions and at the level of security required by the Israeli Privacy Protection Law.
This list is updated whenever a provider is added or replaced. A material change will also be reflected in updates to the main Privacy Policy.
Database, authentication, and secure storage infrastructure
- Supabase Inc. — PostgreSQL database, authentication service, file storage, and real-time service. Data is hosted in the Frankfurt region (Germany, European Union).
Push notification delivery
- Expo (Expo Application Services — EAS Push) — push-notification delivery service for iPhone and Android devices. Expo is exposed to device tokens and notification content.
- Apple Inc. (APNs) and Google LLC (FCM) — the platform-level push delivery services themselves.
External identity providers
- Apple Inc. — Sign in with Apple. When signing in via this path, Apple shares a unique identifier, email address, and display name with us.
- Google LLC — Google Sign-In. When signing in via this path, Google shares a unique identifier, email address, and display name with us.
SMS one-time-password (OTP) verification
As of this update — not currently active. In the foreseeable future we will add an SMS-sending provider for phone-number verification at signup (likely Twilio Inc.). When activated, the provider's details will be updated here.
Marketing-site hosting and aggregate event analytics
- Vercel Inc. — hosts the Shield website (myshield.live), including server and Edge functions. Network traffic and basic technical information about visits, including IP country code, flow through Vercel.
- Vercel Analytics — a primary measurement tool with no cookies, no personal identifiers, that records only aggregate events (such as the number of waitlist signups).
Changes to the list
The addition of a new provider or replacement of a provider is documented on this page and accompanied by an updated date and version above. A change with a material impact on the Privacy Policy will also be communicated to users via email, in-app notice, or a notice on the site, depending on the scope of the change.