Use privacy-safe information practices
Federal Trade Commission guidance recommends that businesses take stock of personal information, keep only what they need, protect retained information, dispose of it securely, and plan for security incidents. Security system installers can apply these principles across mobile devices, proposals, site records, shared inboxes, exported reports, customer portals, and outside services used by field or office teams.
Do not ask customers or employees to place cardholder data, bank credentials, complete account numbers, alarm codes, passwords, or secret API keys in general forms, email, text messages, or project notes. Limit access according to job duties and use the secure customer-facing or staff-facing interfaces provided for the selected setup. Confirm product-specific security requirements directly with the relevant provider.