Launched this week

Safe Harbor De-identifier

Launched this week

Mask HIPAA identifiers in clinical text, offline, free

2 followers

Mask HIPAA identifiers in clinical text, offline, free

2 followers

Visit website

Paste a clinical note. The page finds the 18 HIPAA Safe Harbor identifiers and masks them, or swaps them for realistic fakes with date intervals intact. One HTML file, runs in your browser, no server, no signup, no analytics. Built by a hospital physician.

Free

Launch tags:Productivity•Privacy•Health

Launch Team / Built With

Maker

📌

Hi Product Hunt. I am a hospital physician and I built this because every de-identification tool I found wanted an upload, an account, or a subscription, and none of that belongs anywhere near a patient note. It is one HTML file. Paste text, choose Redact (you get [NAME], [DATE], [ID]), Surrogate (fake names and shifted dates so the note stays readable for teaching), or Review (every uncertain guess shown so you decide). Nothing leaves the page; the CSP forbids any network call and you can check that in dev tools. It is honest about its limits: a regex cannot know that a rare diagnosis in a small town identifies someone. So it tells you to read the result back as a stranger would, and it ships a self test on synthetic notes so you can measure recall yourself instead of trusting a badge. Happy to answer anything, especially on what it misses.

Report

4d ago

Maker

For anyone who would rather watch than read: this is the page masking a synthetic note while it is typed. The masked text in the clip is the tool's real output, keystroke by keystroke. If you find a format it misses, paste a fake example here and I will look at it today.

Report

19h ago

Forum Threads

p/safe-harbor-de-identifier

•

19h ago

How do you strip identifiers from a case before you paste it anywhere?

Most clinicians I know paste a case into slides or an AI chat at some point, and the redaction is done by eye, often late at night. The date of birth on the third line is the one that slips through.

I launched a small browser page today that masks the mechanical Safe Harbor identifiers, or swaps them for realistic fakes so a teaching case still reads like a case. Nothing is uploaded. It still cannot see what no rule set can, like a rare diagnosis in a small town.

What does your process look like? A checklist, a tool, a colleague who reads it back, or honestly nothing?

View all