Therapists: keep session notes and client records off the cloud

There are few documents more private than a therapist’s session notes. An intake form lays out someone’s history. Progress notes record what a person said in a room they expected to be confidential. Assessments, diagnoses, correspondence with a doctor. People come to therapy because they need somewhere safe to be honest, and the paperwork that comes out of it carries that honesty in writing. Protecting it isn’t a nice-to-have; it’s the foundation the whole relationship sits on.

So the everyday admin matters more here than almost anywhere. Merge an intake form with a consent sheet. Compress a scanned assessment to email a supervisor. Password-protect a record before it’s stored. Each is a small task, and each is a moment where, with the wrong tool, a client’s most private material gets uploaded to a stranger’s server.

Confidentiality is the practice, not a feature of it

For a therapist, confidentiality isn’t a policy bolted on; it’s an ethical duty and usually a legal one. Professional codes treat client records as something to be guarded carefully. Data protection law treats mental-health information as a special category that needs the strongest safeguards. A breach here isn’t just embarrassing; it can harm a client directly and undermine the trust that makes therapy work at all.

A typical free online PDF tool uploads your file to its server, does the job, and deletes it later on a timer you can’t see. For session notes, that means the most sensitive record a person has ever created gets sent to an unknown third party, processed under terms you didn’t read, on infrastructure you can’t inspect. No deletion promise makes that an acceptable place for a client’s inner life to pass through.

How reader.me protects the work

reader.me runs entirely in your browser. There’s no upload, because no server does the processing. The engine runs on your own computer, inside the browser tab.

When you merge two documents from a client’s file, your browser reads them into memory on your machine, combines them right there, and gives you the result. The notes never leave your device. For a practice built on confidentiality, that’s not a small detail; it’s the difference between keeping your duty and quietly breaking it for the sake of a quick task.

You can confirm it, which is reassuring when you’re the one responsible for the data. Open any reader.me tool, open developer tools (F12), and watch the Network tab while you work. Nothing uploads. Turn off your internet and it still works, because the file was never going to travel.

The everyday jobs, done privately

• Assemble a client file. Merge intake forms, consent sheets, and notes into one organized PDF, locally.
• Lock a record before storing or sending. Protect the PDF with a password, backed by strong AES encryption, and share the key through a separate channel. Sending notes to a supervisor or a client’s doctor? Lock them first.
• Compress without exposing. A scanned assessment is heavy. Compress it to fit an email without uploading the client’s record to a compression service.
• Make an old scan searchable. A handwritten or scanned form becomes searchable after OCR, so you can find what you need later. The scan stays on your machine.
• Sign a form. Add your signature to a consent form or a report with the signature tool, no third-party service touching the document.

The quiet case for working locally

Much of a therapist’s care about privacy is visible: a locked filing cabinet, a private room, careful language. The risk that slips through is the digital convenience, the free tool that “just” compresses or merges a file and uploads it to do so. It can undo all the visible care in one click, because the document went somewhere you can’t account for.

Working in the browser closes that last gap. The notes go from your machine to wherever they’re meant to be, and through no PDF service in between. There’s no third-party retention policy to trust, because nothing was sent. For the person who trusted you with the things they tell no one else, that’s the standard the work deserves. Open the PDF tools, do the task locally, and the most private record they have stays exactly where they believe it is: with you, and no one else.