Apple Dictation and HIPAA: what Apple says, and what it does not

By Published

People ask whether Apple's built-in Dictation on the Mac is HIPAA compliant, usually because it is already there and free. The short answer: Apple's privacy and support pages name no Business Associate Agreement, the BAA that HIPAA asks for, for Siri or Dictation, and I could not find one anywhere Apple publishes. What Apple does describe is when your dictation stays on the Mac and when it goes to Apple's servers, and that is worth knowing either way. I make YapToText, a different dictation app, and I am not a lawyer or a compliance officer. Everything about Apple here is from its legal page Siri, Dictation & Privacy and its Mac User Guide, read on October 27, 2026. Your organization decides what is compliant for you.

Download YapToText on the Mac App StoreThis app is completely free. You don't have to make an account. There are no subscriptions, no difficult downloads, and nothing is locked. Made for Apple silicon Macs. Source on GitHub.

What Apple's privacy page says about Dictation

  • On device, sometimes. Your Mac says in Keyboard settings whether your audio and transcripts are processed on your device and not sent to Apple's servers.
  • Otherwise, Apple's servers. If it does not say that, what you dictate is sent to and processed on Apple's servers.
  • Audio storage is opt in. Unless you opt in to Improve Siri and Dictation, Apple says your audio is not stored.
  • Transcripts can be kept. Apple may keep and use request data, transcripts included, for up to two years under a random identifier, and a reviewed subset may be kept longer.
  • Context goes along. Your device may send contextual data with a request, such as contact names and nicknames.

Apple describes privacy protections, not a HIPAA agreement. Apple Dictation privacy goes through each of these in more detail.

Check where your dictation goes

  1. Open System Settings and click Keyboard.
  2. Find Dictation and read the text under it. It says whether your voice and transcripts are processed on your device.
  3. Open Privacy & Security, then Analytics & Improvements, and turn Improve Siri & Dictation off.

On a Mac with Apple silicon, Apple's guide says Dictation is processed on the device for supported languages. Its guide also notes an exception: on-device processing covers general text dictation, not dictating into a search box. The Mac dictation languages page compares which languages stay on the Mac.

Why on device is not the same as compliant

When speech never leaves the Mac, no outside company handles it in the dictation step, so there is no one to sign a BAA with for that step. That is a real difference, and it is still not a compliance answer by itself. The Mac's own security, where the text ends up, any history kept on the disk, the apps you dictate into and your organization's policies all still matter. With Apple Dictation there is one more condition: the on-device promise depends on your language and settings, and the Mac tells you, not a contract.

How other dictation apps handle it

Some cloud dictation apps offer a BAA because they process your speech on their servers. Wispr Flow offers one on any plan, and superwhisper and Willow Voice each have their own terms. YapToText, the app I make, turns speech into text and cleans it up on your Mac in every language it supports, with no account and no server, so nothing you say reaches me. I do not claim that makes a setup HIPAA compliant. In YapToText, Settings, Advanced, History & audio has Save dictation history, which you can turn off, and Clear history when I quit. Medical dictation on a Mac goes through the settings I would look at first.

About the author. I am Ryleigh Newman, and I make YapToText. My hands do not work well enough to type for long, so I dictate nearly everything, and I built this app because I needed it. More about me and the app.

Sources

Questions

Is Apple Dictation HIPAA compliant?

Apple's privacy and support pages name no Business Associate Agreement for Dictation. Whether a setup is compliant is your organization's decision. Apple does say when dictation is processed on the device.

Does Apple sign a BAA for Siri or Dictation?

Apple's pages on Siri, Dictation and privacy do not offer one, and I could not find one Apple publishes. Ask your compliance team before using it with patient information.

Does Apple Dictation send my voice to Apple?

It depends on your Mac, language and settings. Keyboard settings says whether your audio and transcripts are processed on your device. If not, they are sent to Apple's servers.

Is mac dictation private enough for patient notes?

That is your organization's call. On-device processing and turning off Improve Siri & Dictation reduce what leaves the Mac, but they are not a HIPAA agreement.