Metadata in Scanned Medical Records
Medical records move between a lot of hands — a clinic, a specialist, an insurer, sometimes the patient themselves requesting a copy. Most of that movement happens as a scanned PDF or a photographed page. What nobody looks at is the file wrapper around the chart: the layer of hidden data most scanners, copiers and PDF tools write in by default.
What actually rides along
A document scanned on a multi-function printer or a dedicated scanner can carry the device's serial number, model, and software version in its metadata — the same way a printed page can carry near-invisible tracking dots from certain printers. A record photographed on a phone picks up the usual photo metadata: device model, timestamp, and GPS if location services were on when the photo was taken.
PDFs built from templates or exported by practice-management software carry their own layer: author name, the software that generated the file, and sometimes a revision history if the document was edited after the fact. None of it is intentional exposure — it's just what the tools leave behind. But a record that's supposed to contain only clinical information can end up also naming the device, staff member, or software your practice runs internally.
Why it's worth checking
Patient files are already sensitive by definition, and they often get forwarded well beyond the original clinic — to insurers, referral specialists, legal requests, or the patient's own inbox. A stray author field or device serial number isn't a HIPAA violation on its own, but it's still information leaving the building that nobody meant to send, in a category of file where "nobody meant to send it" matters more than most.
What scrub actually covers here
If the record is a photographed page (JPEG/PNG), scrub removes EXIF, GPS, XMP and any appended data the same way it does for any image — losslessly, on your device, with nothing uploaded anywhere. If the record is a PDF — which most scanned medical documents are — scrub currently detects hidden fields and shows you exactly what metadata and embedded text the file carries. PDF cleaning isn't available yet, so treat scanned medical PDFs as scan-and-check for now, not scan-and-clean.
That check still has value on its own: knowing what's in a file before it goes into a referral packet or a patient portal is the first step, even before scrub can strip it for you.
The short version
Scanned medical records can carry device info, author fields and timestamps that have nothing to do with patient care. Image-based records you can clean today; PDF records you can check today. Get scrub free and see what's actually in your next scanned file.