CMS SecureMe
Scam help for the whole family.
Six checks that matter
A score built from whether your email has turned up in a data breach, how your passwords hold up, whether two-factor sign in is on where it counts, how your phone is set up, what your social accounts tell strangers, and your phone number. Answers run out after a while, because a list you ticked six months ago describes a phone that has had six months of updates since.
What to do, in order
A plan that puts the biggest risks first, written so it assumes nothing. Step by step guides that take you straight to the setting instead of telling you to go and find it. Tools for the moment you need them: a password maker, a locked store for backup codes, a scam message checker, a link checker, a caller lookup and a Wi-Fi check.
Help after it goes wrong
Most apps stop at prevention. This one keeps going. It tells you what to do first and what can wait, explains your right to get money back after a bank transfer scam using the Payment Systems Regulator's rules, points you at the right place to report it, and puts together a pack of evidence for your bank.
A plan for the people you look after
Six people, extendable to ten. See how everyone is doing without seeing anything private: you get a score, never the answers behind it. Get told when someone's score drops or they have not checked in, which is the bit that matters if you are the one your parents ring.
Who it is for
The people scammers go after most are the ones security products serve least: parents, grandparents, and anyone whose phone is their whole digital life.
It works on any network, because being safe from fraud should not depend on who you buy your mobile contract from.
What the score means
Six areas, weighted by how well each one predicts real harm rather than by how easy it is to measure.
Data breaches carry the most weight. A stolen password is the most common way into someone’s account, and we check it against a real list rather than asking you.
Your phone number carries the least. Signing up to the Telephone Preference Service does not stop scam calls, because criminals ignore it, and a control that does not cut your risk should not carry weight that says it does.
No overall score shows until at least four of the six areas are done. Checking a phone number takes about fifteen seconds, and an app that answered that with “100 out of 100, Strong” would be lying to the person who most needed the truth.
What leaves your phone
Being straight about this matters. Your answers, your saved codes, your records and your score history stay on the device. What does leave is listed in full, in plain words, inside the app and in the privacy notice on this site:
- an email address, to check it against known data breaches
- the first five characters of a scrambled password, never the password itself
- a phone number, for a preference service lookup
- a web address you asked us to check
- for a plan, a locked copy of a score that we cannot read, plus a display name and a notification token that are not locked
- your Apple or Google sign-in and your purchase receipt, if you buy a plan
Two things are worth saying out loud rather than leaving to the small print. If you turn on monitoring, we hold the address being watched under a key we hold ourselves, because checking it while your app is closed means we have to. And if you set up plan recovery, we store a locked copy of your family key that only your passphrase opens. Both are explained in the privacy notice.
When you can get it
CMS SecureMe is not on the App Store or Google Play yet. There is no listing to link to and nothing to download, and we would rather say so than put up a button that goes nowhere.
The privacy notice and terms are published here ahead of time, because an app that asks people to trust it should be readable before it ships, not after.
What CMS SecureMe is not
- Not antivirus. It does not look for viruses, it is not a VPN, and it does not filter your internet or block calls.
- When a check cannot tell whether something is safe, it says so instead of guessing. "We cannot tell" is a real answer here, and you will see it.
- No advertising code, no analytics, no trackers. Your answers, your saved codes, your records and your score history stay on your phone.
The documents for CMS SecureMe
- CMS SecureMe privacy noticeWhat CMS SecureMe holds, what leaves your phone, who receives it and why. Most of your data stays on the device. Everything that does not is listed here, and so is the one key we hold ourselves.
- CMS SecureMe terms of useThe rules for using the CMS SecureMe app: what the licence covers, what the app is and is not, and the limits on what its guidance can promise you.
- CMS SecureMe terms and conditionsThe money side of a paid SecureMe Protect subscription: what it includes, what it costs, how seats work, how renewal and cancellation work, and how refunds are handled when an app store took the payment rather than us.