Thumbar
Built for small shops on Square

Know when a product you sell is recalled.
Automatically.

Every barcode you sell, checked against three federal recall feeds — when your catalog changes, when the feeds change, and every day. Read-only. One plain email when something hits.

A clay-model street of small storefronts — a grocer's baskets and an apple sign under awnings, the Golden Gate Bridge behind.
Sources

Three federal feeds. One watch. Zero tabs left open.

The notices you'd otherwise have to go hunting for, matched to your own catalog — by barcode and by name.

  • FDAfood, beverages, supplements
  • FDA drugsover-the-counter & prescription
  • CPSCconsumer products, furniture
  • USDA FSISmeat, poultry, egg productsnot checked yet — awaiting USDA access

Beyond the four: EPA stop-sales and FDA import alerts are not covered today.

Inside a clay-model grocery — crates of fruit and a hanging scale.
Setup

Connect your Square store. That's the whole setup.

Thumbar asks Square for permission to read your catalog and inventory — nothing else. We can't see your sales, your customers, or your payments, and we can't change anything in your store.

Nothing to install. Revoke any time from Square's own dashboard.

What we can see — and what we can't
Inside a clay-model toy and bike shop — stocked shelves and a bicycle.
The watch

It watches every item you sell — so you don't have to.

Every item, matched by barcode and name — when your catalog changes, when the feeds change, and on a daily sweep.

When something hits, you get one plain email — and proof on paper.

It names the product and quotes the notice — the agencies' own words, straight from the source, never a paraphrase.

An append-only audit record you can hand to an inspector — CSV or print.

Why it matters
The stakes

Hundreds of recalls a year. Selling one is illegal.

296

food recalls in 2024, FDA and USDA together — U.S. PIRG

369

CPSC recalls and warnings in 2024 — a record year — CPSC

Illegal

to sell a recalled product — no size floor — 15 U.S.C. §2068

Trust

What we can see — and what we can't.

Plain words, no fine print: what we read, what we never touch, and what leaves with you.

Read-only, by design.

Thumbar asks Square for permission to read your catalog and inventory — nothing else. We can't see your sales, your customers, or your payments, and we can't change anything in your store.

Leave any time — and everything leaves with you.

Disconnect from Thumbar, or revoke us from Square's own dashboard. Our access ends and everything we held for you is deleted automatically: the catalog we mirrored, reports, our copies of your alerts. What remains is a dated record proving the deletion happened.

Encrypted at rest.

Your Square tokens and your contact details are encrypted in our database, with keys we can rotate without you lifting a finger.

Never sold, never shared, never trained on.

We don't sell your data, share it with advertisers, or use it to train AI models.

We never talk to the government for you.

Thumbar reads public notices. It never files, registers or reports anything to any agency on your behalf.

Get in early

Early access is open.

For grocers, corner markets, butcher shops, hardware stores — any small shop on Square that scans a barcode.

Simple monthly pricing — the number is on the pricing page.

Nothing is billed during early access.