everyday mac tools

Redact medical records on a Mac before you share them

· 7 min read

Medical records arrive as PDFs full of identifiers that are easy to miss: a record number in every page footer, a barcode on each lab report, your date of birth written three different ways. To redact them properly, work on a copy, delete every page the recipient did not ask for, search for each identifier, redact with a tool that removes content rather than covering it, then check the result and clean the file’s metadata before it leaves your Mac.

This guide is for people sharing their own records, or a family member’s with permission. If you work in a practice that releases records, your organization’s procedures come first.

Decide what the recipient actually needs

The safest redaction is a page you never send. Write down exactly what the request asks for, such as proof of a hospital stay or a list of current medications, and go through the file with that list in hand.

A download from a patient portal often bundles far more than one request needs: visit summaries, lab results, imaging reports, billing pages and messages. An employer asking for proof of an absence needs a discharge summary, not a full chart. Remove the rest before you start redacting, using the steps in Delete pages from a PDF on a Mac.

Always work on a duplicate. Select the file in Finder, press Command-D, and rename the copy so you cannot confuse the two.

What to look for on each page

Identifiers in medical records sit in places a quick read skips:

  • Headers and footers. Name, date of birth and medical record number often repeat on every page, sometimes in very small type.
  • Account and member numbers. Insurance member ID, group number, billing account number, and on older records a Social Security number.
  • Barcodes and QR codes. Lab reports and specimen labels often carry codes that encode a patient or specimen ID. A barcode is readable data even if you cannot read it yourself.
  • Contact details. Address, phone, email, emergency contact and next of kin.
  • Other people. Family history sections name relatives and their conditions, and notes may name a partner or carer.
  • Fax and print lines. Records that were faxed or printed often carry a transmission line across the top with names and numbers.
  • Details outside the request. Diagnoses, medications or results that have nothing to do with why the document is being shared. Whether to remove them is your call, and it is often the most important one.

Find every instance, including the ones you cannot see

On a PDF with real text, search finds each occurrence. Open the copy in Preview, press Command-F, and search for your surname, your record number, and your date of birth in every format it might appear: 03/14/1985, 3/14/85, 1985-03-14 and March 14, 1985. Search for the last four digits of long numbers too, since some records mask the rest.

A scanned record has no text to search, because each page is a picture. Run text recognition first so search can find things; Make a scanned PDF searchable on a Mac shows how. Recognition adds an invisible text layer, and a redaction then has to remove that layer under the mark as well as the visible pixels.

Redact in Preview, and know its limits

Preview’s Redact tool removes what is under the mark when you save, rather than drawing a box over it. A rectangle drawn with the shapes tool is a different thing entirely, and Why a black box on a PDF does not redact anything explains the difference.

  1. Open the copy in Preview and choose Tools, Redact. Accept the warning that the content will be removed when you save.
  2. Drag across each piece of text you want gone. For barcodes, signatures and scanned areas, drag a rectangle over the region.
  3. Work through every search result and every page, headers and footers included.
  4. Save with Command-S.

Preview cannot mark every occurrence of a word at once, so a long record means many separate marks, and it does not check its own work afterwards. Redacting a PDF in Preview on a Mac goes through what it leaves behind.

Check the result before it leaves your Mac

Run these on the saved copy:

  1. In Preview, press Command-A then Command-C, paste into TextEdit, and search for each name and number you removed. Nothing should turn up.
  2. Search the PDF itself with Command-F for the same terms.
  3. Zoom in on each barcode and image mark to confirm the box covers all of it.
  4. Choose Tools, Show Inspector and read the title, author and keyword fields. Exports sometimes put a name in the title. Remove metadata from a PDF on a Mac before you share it covers the fix.
  5. Rename the file. A name like “Smith_J_MRN4471_records.pdf” gives away exactly what the redactions hid.

How to check whether a PDF was really redacted has more thorough checks, including a few in Terminal.

When the record is long or you do this often

A fifty-page chart with a record number on every page is where marking by hand goes wrong. Basalt is a Mac PDF app built around redaction that destroys content rather than covering it. Text under a mark is cut out glyph by glyph, images under a mark are destroyed and re-encoded, and the metadata, XMP, attachments, hidden layers and stale thumbnails that Preview leaves alone are stripped. You review every mark before anything is applied, and its Scripts tool can propose marks for you to review; nothing is applied without you.

Before any file is written, Basalt’s verifier re-opens the export with an independent parser and confirms that the removed strings are absent, the pixels have changed and the history is gone. If a check fails, no file is written. The engine that opens your documents runs as a separate process with no network access, enforced by macOS, so the record stays on your Mac. The same window has Make Searchable for scanned records and a page tool for deleting and reordering pages.

Basalt needs macOS 13 Ventura or later. It is free for 24 hours with every tool, with no account and no card, then $29 for a lifetime license covering up to three Macs.

Questions

Can I send a screenshot of the page instead? A screenshot has no hidden text layer, which helps, but it captures everything visible in the frame, and image files carry metadata of their own. If you go that way, crop tightly and follow Hide personal details in a screenshot before you share it.

Is it safe to use an online redaction site? It means uploading the unredacted record to someone else’s server first, which is the exposure you were trying to avoid. Why a redaction tool should work with the network off explains the reasoning.

Do I need to redact records I am sending to my own new doctor? Usually not. A new provider generally needs your identifiers to match the records to you, so ask what they need first.