McGesund signal principles

Why care signals must be fast, structured and visible

In nursing facilities, outpatient services and on hospital wards, it is often not the single incident that matters but the question of whether it is noticed in time. McGesund signals are a tool that closes exactly this perception gap: simple, structured tips from residents, relatives and staff that land in the task dashboard in seconds — and cannot be ignored there.

The problem: good care often fails on communication

Anyone who has ever visited someone in a nursing home knows the impression: staff are friendly and engaged, but everywhere hands are missing, everyone is rushing, and concerns are often passed on orally at the handover — where they get stuck or are lost. Residents shy away from addressing a nurse directly because they do not want to be a burden. Relatives notice something off during a visit, perhaps write to the home management, receive a polite reply — and nothing changes.

These gaps are not malice but structural. No one has time to follow up every observation manually, and classic complaint routes are too slow for everyday life on a ward. The result is a blind spot that costs many facilities their reputation — and leads to care deficits that no one consciously allowed to happen.

Our standard: tips that do not evaporate

A signal on McGesund should fulfil three things: it should be easy to submit (for elderly residents, hurried relatives, staff on the early shift), it should be structured (so that the care team knows in seconds what it is about), and it should become visible (in the dashboard with status, responsible person, completion timestamp). These three requirements sound trivial, but in everyday care they are anything but self-evident.

How a signal is submitted

Residents, relatives and staff scan a QR code displayed directly at the bed, on the room door, on the ward or at the entrance. The code opens a page on which, in two clicks, one of six structured categories is chosen — no sign-up, no account, no password, no app installation. Works on every smartphone and every browser, including for relatives who are only visiting briefly.

As soon as the tip is submitted, it appears in the facility’s task dashboard — sorted by category, unit (room, bed, ward, floor), time of receipt. Care staff see the arrival in real time, take over signals, document what they have done and mark them as done. Nursing management and home management see the same picture, with additional trend evaluations per week or shift.

The six categories — and why there are only six

A signal is not an open complaint form. Whoever submits a tip on McGesund chooses one of six predefined categories:

  • Wait time for help — the call button was pressed, no one came.
  • Pain management — pain was expressed but not treated or taken seriously.
  • Staff hard to reach — no one at the nurses’ station, no response to calls.
  • Communication with relatives — information came late, was imprecise or did not come at all.
  • Cleanliness / comfort — hygiene, laundry, room condition, food.
  • Very good care — an explicit praise that shows what is going well right now.

This reduction to six categories is intentional. In nursing research it has long been known that structured entries are processed significantly better than free-text complaints, because they can be prioritised immediately. A nurse who sees an entry “Pain management — Room 12” on the late shift knows immediately what to do. For a three-page complaint letter, it often takes days before a first reaction.

Anonymity and privacy

A signal is submitted without login. We store no name, no contact details, no resident reference, no telephone number and no app account. The QR code is tied to the unit (room, bed, ward), not to the person. This makes a signal content-wise verifiable — we know which area of the facility it comes from — but not person-related. This is a deliberate design decision: residents should not have to fear that a signal flows into their care record or leads to social consequences.

For facilities this also means: signals are not patient data in the sense of care documentation. They are quality feedback that can be used in a targeted way for internal improvement and for reports — such as our quality report export on the Klassik plan — without identifiable persons appearing at any point.

Cryptographic reliability — quantum-resistant from the first plan

Care-related data has higher requirements than McGesund reviews. That is why signals start at the highest classic security level already on the Basis plan and are aligned from Klassik onward to the NIST primary recommendation ML-DSA-87 (FIPS 204, finalised 2024) — ready for foreseeable care-data requirements around quantum-resistant signatures.

Falcon-1024

Basis

Ed25519 plus Falcon-1024 as an additional, quantum-resistant signature — already NIST Level 5 (highest security category) from the entry plan.

ML-DSA-87

Klassik

NIST primary recommendation (FIPS 204), optionally additional or alternative — prepared for upcoming compliance requirements.

Double PQ — Falcon-1024 + ML-DSA-87 in parallel

Pro & Premium

Both quantum-resistant schemes in parallel — no single-algorithm risk. Even if one of the two schemes is eventually broken, the other continues to protect the audit status of every signal captured.

Bitcoin blockchain anchor: every signature key is additionally anchored in the Bitcoin blockchain via OpenTimestamps. This makes it possible to prove externally and without McGesund trust, for every single signal capture, that the corresponding key already existed at the time of capture. This audit layer is included in all plans.

In detail: authenticity overview with a plain/technical toggle and all official standards links.

Change of perspective: why a single signal is not an attack

Home managers occasionally experience it as an affront when a signal comes in. We know the reaction from countless conversations: “Who reported that?”, “That is not how it is”, “You can hardly say anything any more these days”. We would like to invite you to pause this reflex. A signal is not a verdict but a data point. Only the accumulation, the trend, the distribution over time make it a statement about quality.

A single “Wait time for help” signal on a Sunday evening can be an outlier. Three signals on the same Sunday evening, every week, are a hint of a shift-structure problem that can be solved — by an additional floater, a changed break arrangement, better call-button logistics. Whoever understands signals as a free, near-real-time sensor gets something that classic quality audits cannot deliver: continuous, unfiltered feedback from everyday life — and thus the chance to solve problems before they become complaints, inspection findings or staff turnover.

Why it pays to actively submit signals

Many residents and relatives hesitate before the first signal. The most common worry: “If I report this, my mother might feel that I complained.” This worry is understandable — and it is exactly the reason why we keep signals anonymous. Whoever submits a signal gives the facility a chance to improve, without having to harm anyone. That is an act of care, not denunciation.

Submitting signals actively also has a personal dimension. Whoever translates an observation into a clear category from time to time trains the habit of taking their own perceptions seriously instead of suppressing them. This is particularly important for relatives, who are often torn between guilt, exhaustion and loyalty to the facility. A signal is a way to let one’s own observation stand — short, factual, without a dramatic letter — and thereby create clarity, both for oneself and for the care unit.

And finally there is a societal dimension. Nursing care is one of the areas where the gap between internal reality and external perception is particularly wide. Whoever signals helps to close this gap — for the next resident, the next relative, the next caregiver who will one day work in a similar home. Three clicks, ten seconds, no account. That is the price of living or working in a facility where tips are heard.

Care roles and escalation paths

Who may respond to a signal is clearly regulated. Care staff take over signals and mark them as done. Nursing management (PDL) additionally sees weekly trends and can assign shifts and responsible persons. Home management has all rights, including dismissal (“dismissed”) and quality report export. This prevents signals from being accidentally overlooked or deleted in frustration — care staff may not irreversibly dismiss anything, that is exclusively a management matter and is documented in the audit log.

Our promise

McGesund does not sell signals, does not add any, does not hide any. Facilities pay for functional scope (more units, quality report export, multi-site reporting) — not for a better signal picture. This separation is a hard line for us: it makes the difference between a tool that helps to conceal problems and a tool that exposes them. The latter is and remains our role.

Do you have hints about a facility, suspicion of manipulation or questions about the evaluation of your signals? Write to us at info@mcgesund.de or via the support function in your account. We read every report and reply personally.

How it works — the mechanics

Incidents in care facilities are mostly reported through official complaint channels today — with a high dark figure. McGesund Signals add a second channel decoupled from reporting friction. The mechanics deliberately without care-outcome percentages, only the verifiable formulas.

Reporting coverage

What share of actual incidents is detected results from combining two independent channels:

D  =  1(1po)(1pa)D \;=\; 1 - (1 - p_o)\,(1 - p_a)
  • po = detection rate via official reporting channels (internal documentation, complaints management, supervisory bodies)
  • pa = detection rate via anonymous signals from residents, relatives and staff
Setupp_op_aD
Official channels only0,400,000,40
Official channels + McGesund Signals0,400,600,76

The anonymous component p_a raises detection because it bypasses the typical reporting friction — residents and relatives report more when they need not fear consequences.

Time to detect

The time until an incident is acted on changes by a factor k under direct shift escalation:

Tdetect(McGesund)  =  ToffiziellkT_{\text{detect}}(\text{McGesund}) \;=\; \dfrac{T_{\text{offiziell}}}{k}

k ≈ 30 … 100

Instead of weeks or months via formal complaint escalation: minutes to hours via real-time shift escalation. Early correction instead of a subsequent inspection finding.

Assumptions for p_o and p_a draw on anonymous whistleblower reporting research (incl. ACFE Report to the Nations, Hwang/Kim 2009). Anonymous channels reproducibly achieve multiples of the reporting rates of official channels. The exact values are plausible model assumptions, not measurements by McGesund.

In short

  • QR code on site, without app and account, submitted in two clicks
  • Six structured categories — immediately prioritisable in the dashboard
  • Anonymous for residents and relatives, unit-linked for the facility
  • A single signal is a data point — trends are the actual statement
  • Clear roles: care staff handle, nursing management assigns, home management dismisses / exports

Back to the homepage