That night, the walkers crowded into Asha’s small shop.
She placed the check-in form on the tablet.
Then she disabled it.
“What happened?” someone asked.
Asha explained without revealing Juma’s health details or location.
Their words may have entered an employment-scheduling system without informed consent. The immediate proposal was not to end the walks, but to stop collecting the data while the group decided what it actually needed.
“I made mistakes too,” Asha said. “I left the form link public. I kept emergency contacts and check-ins too close together. I assumed that because we were not a business, our data was not valuable.”
Sudi raised a harder question.
“Who currently has access to the spreadsheet?”
Asha opened the permissions.
Herself.
Mariam.
And an old volunteer who had left two months earlier.
The room went quiet.
“Remove him,” someone said.
“First preserve the audit log,” Asha replied.
They did.
Then they voted on what should survive.
Option one: close everything.
Option two: keep walks but end check-ins.
Option three: keep a limited paper opt-in.
The second option won.
They kept walking.
They stopped scoring, recording moods, and storing routine “what I managed” answers.
Emergency contacts became a separate optional system. Complaint statements required separate consent. A three-person committee—Mariam, Sudi, and Mama Beka—would control group records rather than Asha alone.
That last part hurt more than Asha expected.
“You look as if you’ve been evicted from your own house,” Mariam said later.
“A little.”
“Good.”
“Why good?”
“Because you keep saying the group should survive you.”
Asha gave her a look.
Then Sudi found the old member account.
Sam.
Still active.
Last login: two minutes ago.
“Delete it,” a member said.
“Remove membership, yes. Do not enter the account.”
“It has been spying on us.”
“Maybe. We preserve the audit trail and verify identity.”
The vendor received a preservation request before the account was removed.
Members wanted to publish screenshots. Asha refused.
The official update said only that an account linked to a company liaison had been removed pending verification and no member should contact suspected individuals.
Meanwhile, the group’s own privacy audit grew more uncomfortable. They had 1,842 check-in rows. They chose a read-only preservation state for the regulator matter, with a later retention decision. The raw sheet would not remain forever merely because a complaint existed.
The next walk would have no form.
No attendance list.
No estimate of who had promised to come.
Asha found that frightening.
That was exactly the point.
She had spent years making care easier by collecting enough information to anticipate people.
The committee’s first decision after taking control was uncomfortable for Asha: the old emergency contacts had to be separated from routine activity records immediately.
They created a temporary restricted sheet, then planned a more secure replacement in which members could opt out entirely.
“Why did we ever keep these together?” Sudi asked.
“Because it was convenient,” Asha said.
“That answer keeps appearing.”
“Yes.”
They also debated whether the group needed any attendance count for future funding. Mama Beka asked why a free walk needed to prove engagement at all.
No one had a satisfying answer.
That conversation mattered because the group could easily recreate the same incentive under a new name: collect more information because a donor, sponsor, or founder might find it useful later.
For the time being, they chose the smallest possible system.
Route. Time. Optional safety buddy.
No routine personal statement.
Asha found herself missing the little 4:58 messages.
She let herself miss them without using that feeling as a reason to keep them.
Now she had to learn to support people she could not monitor.