Tracking your order should not mean tracking a person

A live map of a named employee is location tracking of a person. Whether that is proportionate depends on things software cannot know — whether they are employed or contracting, what their contract says, which country you are in, what you told the customer.

So the default is the most private option, and it stays that way until somebody chooses otherwise. An organisation that has never opened this screen has not agreed to broadcast where its staff are.

Nothing before the job is on its way, and nothing once it is finished. "Full" means for the duration of the visit, not always — where somebody is before they set off is a fact about their day, and a tracker left running afterwards is a live feed of their route home.

For work inside a home rather than at a door, this matters more, not less. Somebody is being let in.

"Jessica is on her way" is the part that matters to the person about to open their door, and it is shown whichever visibility setting you pick — including the one with no map.

A first name only. Not a surname, not a phone number, not an employee record. Enough to recognise who is arriving, and nothing that identifies your staff member to whoever the link gets forwarded to.

An optional handover code is there for the jobs where giving the parcel or the keys to the wrong person actually matters.