About this project

FED-SPA (Florida Establishment Directory — Spa & Parlor Assurance) is an independent, no-backend directory of licensed massage establishments in Florida. It provides an annual snapshot of public records verified against the Florida Department of Health Medical Quality Assurance (MQA) portal, plus a subscriber-only watchlist of businesses where no license match was found. The project emphasizes three architectural constraints: no backend or server, no third-party libraries or trackers, and an annual human-driven refresh cadence. The licensed dataset ships as plaintext JSON and CSV for public audit and reuse. The watchlist tier is encrypted at rest using PBKDF2-SHA256 and AES-256-GCM, decrypting only in the client after a subscriber enters a shared code; entries include documented search terms and dates rather than conclusions. A single source of truth is fanned out by Python admin scripts to six surfaces: an installable offline-capable PWA, a Chrome Manifest V3 extension, Android and Android Auto apps, a watch app, and an iOS SwiftUI app. Some surfaces intentionally expose only licensed data for minimization. The repository includes annual workflow scripts for scraping, validation, encryption, and release tagging, with each release logged and records carrying verification fields such as portal URL, last checked date, and data-as-of date. The project is not a live feed or government service, and it directs users to re-verify on the official MQA portal before decisions. Code is MIT licensed and the dataset is ODbL 1.0.