Anonymize a medical report before you share it
You need a second opinion, you're filing an insurance claim, you're posting a fundraiser — and the lab report in your hands has your full name, age, phone number, address and a patient ID printed right at the top. Sharing the medical part is the point; sharing the identity part is the risk. To anonymize a medical report is to keep the findings and black out the person — and doing it right matters more here than anywhere, because a "redacted" PDF with live text under the black boxes isn't redacted at all.
This tool does it properly and privately. It scans your report on your device — nothing uploads, ever — finds likely personal details (patient name, age, sex, date of birth, address, phone, email, Aadhaar-format numbers, UHID/MR numbers, doctor names), and shows you every proposed mask on a page preview. Then you review each one — because no automatic detection is perfect — and only after you confirm does it build the anonymized PDF: pages rasterized, masks burned in as solid black, no text layer left to extract, no metadata carried over. What you download cannot be un-redacted.
How to anonymize your medical report
- Drop your report PDF onto the page. Click the upload area or drag the file in. It is read locally; the page works even if you pull the network cable after loading.
- Click "Scan for Personal Details." Pattern detection runs on your device — labeled fields (Patient Name, Age, DOB…) plus phone, email, ID-number formats and doctor names. A minute at most.
- Review every mask. This is the mandatory step: red boxes on each page preview show exactly what will be blacked out, and the list lets you toggle each one. Uncheck anything that isn't personal. Add custom terms (the patient's name as it actually appears, a clinic name) and scan again — unlabeled names are the main thing pattern detection misses.
- Confirm and download. Tick the review confirmation — the download unlocks only then — and get your anonymized PDF. Your original file is untouched.
What gets detected — and what doesn't
Detection is pattern-based, not AI, and honest about it. It reliably catches labeled fields — "Patient Name:", "Age:", "DOB:", "Address:" — and format-shaped data: 10-digit phone numbers, email addresses, Aadhaar-format 4-4-4 numbers, UHID/MR/registration numbers, and "Dr. Name" patterns. What it can miss: names with no label nearby ("Arjun Mehta" floating in a header with no "Name:" in front), unusual ID formats, and anything in a scanned image (no text layer, nothing to scan). The custom-terms box exists precisely for these gaps — and the mandatory review exists because gaps are guaranteed, not hypothetical.
Real-world use cases
Second opinions online. Post the report in a patient community or send it to another doctor with your identity removed — the findings stay, the person goes.
Insurance and claims. Share reports with agents and TPAs (third-party administrators) carrying only the medical facts, not your phone number and address.
Crowdfunding. Fundraiser posts need proof, not your Aadhaar number. Anonymize first, then post.
Caregiver coordination. Family WhatsApp groups coordinating care don't need everyone's full identity details attached to every report.
Teaching and case discussions. Students and clinicians sharing interesting cases keep the medicine and drop the identifiers.
True redaction vs. fake redaction
Here's the trap most people fall into: drawing black rectangles over text in a PDF editor. The text is still there — select-all, copy, paste, and every "hidden" name reappears. Some tools even leave it in the file's text layer while showing you black boxes. This tool avoids that entirely: each page is converted to an image with the black boxes burned into the pixels, and the PDF is rebuilt from those images with a fresh document (no metadata carried over). There is no text layer to mine. That is what makes it safe to post publicly — and it's worth understanding the difference before you trust any redaction.
A note on compliance
No web tool can declare your document compliant with anything. Privacy rules like HIPAA's de-identification standard list eighteen identifier categories to remove; this tool targets the common ones but is not certified and does not guarantee completeness. For personal sharing — second opinions, fundraisers, family coordination — with careful review, it does the job. For formal, legal, or institutional de-identification, have your compliance or privacy officer verify the output. The mandatory review step isn't bureaucracy; it's the recognition that the last mile of privacy is human judgment.
The bottom line
Share the medicine, not the identity. Scan on-device, review every mask yourself, download a truly redacted PDF — and never trust a black rectangle drawn over live text.