Free for Mac · Works with the internet off

Take the personal details out before you ask an AI.

Drop in a lab report, a bank statement or a photo of a prescription. Stripii blacks out who it is about, then reads its own work back to prove nothing is left.

Download for Mac View on GitHub

v0.3.0 release notes · macOS 14+ · Apple silicon · 38 MB · Not notarised by Apple

NORTHSIDE MEDICAL CENTER – DISCHARGE SUMMARY

Patient Name: Margaret Ellen Whitfield

MRN: 4471982

Date of Birth: 03/14/1934

Address: 1847 Oakmont Drive, Apt 3B, Springfield, IL 62704

Phone: (217) 555-0142

Email: m.whitfield@example.com

SSN: 412-88-9031

Member ID: XHP449182736

Attending: Dr. Robert Chen, MD (NPI 1234567893)

ASSESSMENT

Hemoglobin 10.2 g/dL (low), Hematocrit 31%.

Glucose 142 mg/dL, Creatinine 1.8 mg/dL.

Type 2 Diabetes Mellitus (E11.9), Hypertension (I10).

Plan: continue metformin 1000 mg BID.

Before you download

Apple has not checked this app.

I do not have an Apple Developer account, and this is free, so the app is not notarised. macOS will tell you it cannot verify it. That warning is accurate and you should read it.

1
Open the .dmg and drag Stripii to Applications.
2
Open Stripii once. macOS says it can't be verified. Click Done.
3
System Settings, then Privacy and Security. Scroll down, click Open Anyway next to Stripii, and confirm.

Or in Terminal

xattr -dr com.apple.quarantine /Applications/Stripii.app

Check the download

shasum -a 256 Stripii-0.3.0.dmg
0fbbc4954c1db495b0f3ae6f7f1017f3f27fae66f720e6485d1bafa5ecc49fde

After an update, macOS asks once whether Stripii may use its Keychain item. Choose Always Allow.

This is the whole app

One window. One job. No account.

Stripii's window. A discharge summary with the patient's identifiers blacked out, and a panel reading Ready to share, 16 details removed, with a list of what kinds were removed.

You want an AI to explain your blood test. It does not need your name, your date of birth, your address and your insurance number to do it.

Before After

Drag the line

16 identifiers gone. Names, dates, record and member numbers, address, phone, email, Social Security number.

The medicine stays. Lab values, diagnosis codes and the plan are left alone, because that is what you want the AI to read.

Burned in, not covered. The page is redrawn as a flat image. There is no text underneath to copy out, and no metadata.

How it works.
Step three is the one that matters.

Drop a document or photo, with a Choose Files button.

Drop it in

PDFs, scans and photos, including iPhone HEIC. Text comes from the PDF where it has some, and from Apple's on-device Vision where it does not.

Ready to share: 16 details removed, listed by kind, beside the redacted page.

Details come out

Every page is redrawn with black boxes burned into the image. Annotations, form fields and metadata go. Photos lose their EXIF, GPS and XMP data.

Check before sharing: 4 details removed. 1 name found on a hunch, with one box on the photo outlined in orange.

It reads its own work back

Stripii runs text recognition over the finished page and checks it again. Ready means nothing legible was left. Anything uncertain is outlined, and anything still readable is held instead of handed over.

In this synthetic photo one name was caught by a guess rather than a rule, so the file is marked for checking.

Check the pages: click an outlined spot to black it out, or drag over anything else.

Fix what it missed

Click an outlined spot, or drag over anything else. The page is read back again before it is released.

Ready when you are, with Save PDF and Copy Redacted Text buttons.

Copy or save

The clipboard copy stays on this Mac. Saved files get a plain name instead of the original, and you are warned before saving into a cloud folder.

Don't trust me.
Check.

Notarisation would tell you Apple scanned the app. It would not tell you what the app is allowed to do. One command will:

% codesign -d --entitlements - /Applications/Stripii.app
[Key] com.apple.security.app-sandbox
[Value]
    [Bool] true
[Key] com.apple.security.files.user-selected.read-write
[Value]
    [Bool] true

That is the whole list: open the files you choose, and nothing else. There is no network entitlement, so macOS refuses every connection the app or its helper tries to make. Tested inside the built app for DNS, TCP, HTTPS and a localhost listener.

Privacy check: everything checks out. Seven passing checks, including no network permission in the app's signature and every connection attempt refused by macOS. — The same test, built in. Help, then Check Stripii's Privacy.

0network permissions
0accounts, cookies or analytics
AES-256for the names you save, key in your Keychain
7 / 7privacy checks on the release build

The receipts.
Including the ones that don't flatter it.

findings in an independent audit. All fixed.

The worst: images inside ordinary text-layer PDFs were not being redacted at all, and the document was still graded ready to share. A scan pasted into a Word file went through untouched while the tool said it was safe.

The fix is the read-back. Those pages now go through text recognition and every detector runs again on the output. CI runs pip-audit on every change.

0.927

recall on my synthetic benchmark. Not 1.0.

I am not going to round it up. Names in running prose without a label can slip through, and so can a description that identifies somebody without naming them.

Save your own names and numbers once and they are removed from every file after that. That closes most of the gap for your documents, and none of it for anybody else's.

A real miss, unedited. The command line tool on a sample note from the repository. Orange got through.

Mrs. [[PERSON_1]] returned today accompanied by her daughter [[PERSON_2]], who drives
her in from Brookfield each month. She mentioned that her late husband [[PERSON_3]]
had the same condition. Her granddaughter, who teaches at Brookfield High,
called our office twice last week from [[PHONE_1]].

We reviewed her results with Kowalczyk from the lab. Fasting glucose 142.
She lives alone at the Cedarbrook Apartments on Route 9 and is worried about
the co-pay on her Anthem plan, member number [[HEALTH_PLAN_ID_1]].

De-identification is not compliance. The health profile implements the HIPAA Safe Harbor identifier list, which is a method, not a certification.

Open source engine

The same engine, in your terminal.

A Python library and command line tool, MIT licensed. PDFs, images, text, CSV and JSON. It can put the original values back into a model's reply, and run as a local proxy. Not on PyPI yet.

View on GitHub

% pipx install "git+https://github.com/nikhilrdeshpande/stripii@v0.3.1"
% stripii scrub sample.pdf -o redacted.pdf --profile health
wrote redacted.pdf (1 page(s), read with text layer, redaction drawn on the image)
grade: ready (16 value(s) read back)
sample.pdf: 16 replacement(s)

Questions

Why a Mac app and not a website?

A website would need your document on a server, which is the entire thing this is trying to avoid.

The next option was a local web interface, and that failed for a reason worth recording: WebKit will not render inside a sandbox with no network access. The offline promise chose the technology.

Why does macOS say it cannot verify the app?

Because it is not notarised. That needs a paid Apple Developer account and this app is free. The warning means Apple has not scanned it, nothing more. The checksum and the codesign command are how you check it instead.

Intel Mac? Windows?

No. There is a build for Apple silicon Macs only.

What does it cost?

Nothing. No account, no sign-up, no paid tier.

Is the app open source?

The engine and the command line tool are, under MIT, and the app runs that same engine. The Mac app's own source is closed for now.

What does this page collect?

Nothing. No cookies, no analytics, no scripts, and nothing loaded from anyone else's server. It is hosted on GitHub Pages, so GitHub receives each request the way any web host would. The page's source is in the repository.

Ask the AI.
Keep yourself out of it.