Say where you are going and when you should be there. If that time passes and you have not checked in, the people you chose will know — and are told again four minutes later, until somebody acts. No map, no tracking, nobody watching a dot. A promise with an alarm on it.
Sara asked for twenty-five minutes. Nobody had to be awake for any of this.
Porchlight does not call anyone. It makes sure the people who would already be looking for her are not the last to know.
Sharing your location tells people where you are — if they think to look. At 1:47am nobody is looking. A watch works the other way round: you name a time, and if it passes without you, the app goes and finds your people. Nobody has to sit up watching a dot to keep you safe.
Two taps and a time. The sentence you write is the exact sentence your people are sent, so write it the way you would say it. “Walking home from Ivy’s.” · 25 minutes
Type it before the door closes and your people have it in seconds, not after something has gone wrong. Porchlight cannot check that car against Uber or Lyft — no rideshare company will tell an outside app whose car you are in — so it does the one thing it can: makes sure somebody else knows.
Ending a watch early is the normal ending, and it is the easiest thing on the screen. A safety net you have to fight to switch off is one you stop switching on.
Nothing here is for emergencies. 911 is for emergencies. Porchlight is for the moments before anything is wrong, when all you want is for somebody to notice if you don't turn up.
Late class, closing shift, the last stretch from the bus stop. Set fifteen minutes, arrive, tap once, done. And if you don't, your people know within minutes, not the next morning.
Type the plate before the door closes and the people you chose have it in seconds. Porchlight cannot verify the car (no rideshare company lets an outside app do that), so it does the one thing that matters: somebody else knows.
Someone new, a place you don't know well. Your people see what you called the watch and when you said you'd be home. They do not see where you are, because you didn't ask to be followed.
A kid at college, a parent who lives alone, a friend who walks home late. You cannot start a watch on them — nobody can — but when they start one and name you, you are the one who finds out.
“Text me when you get home” is a promise everybody makes and nothing keeps. Porchlight is the part that notices.
Peace of mind without surveillance. These are not policies we ask you to take on trust: most of them are constraints written into the database, where nobody can talk their way around them.
A watch can only be started on you. The function that opens one takes no argument for anybody else, so covert watching is not banned: it is unrepresentable.
A watch never asks your phone where you are. Your people see what you called it and when you are due, not your position.
You invite them, they accept, and either of you can end it. There is no directory and no lookup, so nobody can find you who you didn't tell.
18 hours is the longest a watch can run before it must be renewed. A permanent watch is surveillance, so it cannot be created.
Every check-in and escalation is written down, and the app is granted no way to change or remove one afterwards: not for you, and not for the people watching.
Porchlight tells the people you named and nobody else. It never contacts police on your behalf.
Porchlight complements 911 and the people already in your life. It never replaces either.
Nothing. Porchlight is free to use: no card, no trial that expires, no paid tier hiding the parts that matter. If that ever changes, it will be announced plainly rather than discovered on a bill.
Location sharing shows people where you are, if they think to look. At 1:47am nobody is looking. A watch inverts it: nobody watches anything, and the alert fires because a deadline passed. Your people are told at exactly the moment there is something to know, and see nothing when there isn't.
Give yourself more time. On a running watch, one tap adds fifteen, thirty, or sixty minutes to the deadline. If it has already gone overdue, the same tap pushes the deadline out from now and stops the escalation, so anyone who was told simply sees it running again. A safety net that forces a false alarm every time you are slow is one you stop switching on, so this is deliberately the easy path. The one thing it cannot do is run forever: no watch lasts more than 18 hours from when it started, however many times you extend it.
No, and not because we forbid it. There is no way to express it. The function that opens a watch takes no argument for whose watch it is — it can only ever be yours, so there is no setting to leave switched on, no admin screen, and nothing for anyone to talk you into. Someone would have to change the database itself. The people watching are people you named, who then had to accept, and either of you can end it.
The watch still runs. The deadline lives on our server, not on your phone, and it is checked every minute whether or not your phone is reachable — so a dead battery does not quietly cancel the one thing that was going to raise the alarm. This is the part a location-sharing app cannot do: a map needs your phone alive and reporting, and the moment it goes dark it simply shows your last dot and says nothing.
Your people get told you are overdue, and you tell them you are fine. That is the system working rather than failing, and it is the trade we chose deliberately — a net that occasionally embarrasses you is worth more than one that stays quiet when it matters. Ending a watch early is one tap and the largest control on the screen, and your own phone nudges you a couple of minutes before the deadline so most of them never get that far.
No. A watch is a deadline, not a map. It never asks your phone for your position — there is no screen in Porchlight that sends it. What your people see is what you called the watch, when it was due, and the plate if you chose to send one.
Only the people you invited, and only after they accepted. There is no public directory and no invite-by-search: you exchange ids with people you already talk to, out of band, so nobody can find you inside the app who you didn't tell.
Anywhere. A check-in is a promise between you and your people, not a local service, so there is no coverage area. We are building it from Kansas City, which is why the early-access list starts here.
Porchlight is early, and it is free. Join the list to hear when there is something new to try, and to have a say in what gets built next.
Anything you want us to know?