I'm a therapist looking to replace an aging first-generation 9.7-inch iPad Pro that no longer performs well. I'd like to take handwritten or typed notes on a tablet and keep them stored locally rather than relying on cloud synchronization. I'm considering a Supernote Nomad, reMarkable, or a newer iPad. What tablet and note-taking setup would provide strong privacy protections, including encryption and passcode access, for handling clinical notes?
2 Answers
A newer iPad is probably the safest all-around recommendation here because it offers much faster hardware than a first-generation iPad Pro, built-in device encryption, strong passcode protection, automatic security updates, and a wide selection of note-taking apps. Supernote and reMarkable may be appealing for distraction-free handwriting, but confirm whether their files are encrypted at rest, whether the device can be fully locked, and whether any data is uploaded or synchronized by default before using them for identifiable clinical information.
A tablet does not automatically become HIPAA-compliant just because of the app. The important factors include how the device stores, encrypts, protects, and shares patient information, along with your organization’s policies and risk controls. An iPad with a strong device passcode, automatic updates, encrypted local storage, and a note app that supports local encryption or app locking may be a practical choice. Apple Notes and Notesnook can support locally stored, password-protected notes, although you should verify their current settings and whether any synchronization is disabled. Also consider remote-wipe capability, backups, and what happens if the tablet is lost or stolen.
Notability is another option to investigate. It supports passcode-protected notes and can work with local storage, but make sure cloud syncing and backups are disabled or configured appropriately for your policies.
HIPAA considerations can extend beyond sharing information. Storage safeguards, breach response, access controls, and related requirements matter too, so it’s worth checking the setup with whoever handles compliance for your practice rather than relying only on an app’s marketing claims.