I'm a therapist looking to replace an aging first-generation 9.7-inch iPad Pro with a newer tablet for handwritten session notes. I'd prefer to keep the notes stored locally rather than relying on cloud services, and I want strong encryption and passcode protection to reduce the risk of unauthorized access. I'm considering a Supernote Nomad, reMarkable, or a newer iPad. What hardware and note-taking apps would be good choices, and what should I verify to stay compliant with HIPAA requirements?
3 Answers
An iPad is probably the most flexible option. The important features are encrypted storage, a strong device passcode, automatic locking, and an app that can protect individual notes or the entire app. Apple Notes and Notesnook can support local storage and encryption, although you should carefully review their sync settings and disable cloud syncing if local-only storage is your goal. Also, HIPAA compliance involves more than simply choosing a device, so your overall security procedures and how information is shared matter too.
HIPAA and HITECH also address safeguards, breach response, and how protected information is stored—not only what happens when notes are shared. It would be worth confirming the setup with a compliance professional.
Notability is another option worth checking. It supports passcode protection and can work well for handwritten notes on an iPad. A current base-model iPad or newer iPad Air should be substantially faster than a first-generation iPad Pro, so you likely don’t need the most expensive model unless you want a larger screen or extra multitasking performance.
A newer Apple iPad should meet the practical tablet requirements, but verify whether the particular note app stores data locally, encrypts it at rest, and keeps backups or synchronization from sending protected information to an unapproved cloud service. Dedicated e-ink tablets may offer a simpler experience, but check their device-locking, encryption, backup, and export capabilities carefully before using them for clinical notes.
That makes sense. I’ll look more closely at the storage and encryption settings rather than assuming the tablet itself guarantees compliance.