Keeping Medical Photos Private on Your iPhone

Medical photos are best kept outside your main photo library: in a locked note or an encrypted vault, taken with a camera that does not save to the Camera Roll, and shared without location data. That keeps a rash, a wound, a scan, or a prescription from resurfacing in a Memories slideshow, a widget, or a shared album.

The situation and the real risk

Phones have quietly become medical records. People photograph symptoms to track them over time, pill bottles to remember dosages, insurance cards, lab results, post-surgery wounds for a follow-up call, ultrasound images, mental-health worksheets. Some of it is mundane. Some of it is the most private information you have.

The Photos app treats all of it the same as a sunset. That means:

• Medical photos can appear in Memories and Featured Photos — on your Home Screen or in a slideshow during a family gathering.
• With iCloud Photos on, they sync to every device signed in to your Apple Account, including a shared iPad.
• They can be seen by anyone you lend the phone to, a few swipes from a vacation picture.
• Images can carry location and time metadata, which may reveal a clinic you visited.

None of this is a catastrophe. But health information is personal, and in some situations — employment, custody, insurance, or simply family dynamics — it is sensitive in a very real way.

What you can do with built-in iOS tools

• Use locked notes for documents. Notes can scan documents (tap the camera icon > Scan Documents) and lock a note with your device passcode. Our guide on locking notes on iPhone explains the options. Note that scans made inside Notes stay in the note rather than in Photos.
• Hide and lock. Move photos to the Hidden album and keep it behind Face ID in Settings > Apps > Photos.
• Keep them out of Memories. Hiding a photo removes it from Memories and Featured content. See hiding photos from Memories and Featured.
• Strip location when sharing. In the share sheet, tap Options at the top and turn off Location. You can also remove the location from a photo by tapping the info button and choosing to adjust the location to none.
• Check iCloud. If you prefer medical images not to be in the cloud, read how to stop photos syncing to iCloud — but note the options are mostly all-or-nothing for the Photos library.
• Use the Health app for records. Health Records and Medical ID are designed for structured health data and have their own privacy controls.

Where built-in tools fall short

The Hidden album and locked notes both rely on your phone passcode. Anyone who knows it — a partner, a family member — can open them. The Hidden album still syncs with iCloud Photos. And the moment you take a medical photo with the regular Camera, it is in your library, possibly already uploading, before you have a chance to hide it.

How sigil. helps

• Capture without the Camera Roll. The private camera saves straight into an encrypted vault. The photo never appears in Photos, never enters iCloud Photos, never shows in Memories.
• Its own key. Vaults are encrypted with a 256-bit key that only the sign you draw can unlock — not your phone passcode. See pattern encryption.
• Metadata stripped. sigil. removes EXIF and location data on import and export, so the clinic's GPS coordinates are not hiding in a file you send.
• A vault per topic. With multiple hidden vaults, you can keep medical images separate from, say, ID documents, each behind a different sign.
• Local-first. No account and no server. The trade-off: sigil. has no cloud backup yet, so keep your recovery phrase safe and keep important records with your provider too.

Checklist for medical photos

1. Decide which medical images you actually need to keep. Many can be deleted after an appointment.
2. Move the rest into an encrypted vault or a locked note, then delete the originals from Photos and empty Recently Deleted.
3. Use the private camera for future medical photos.
4. Before sending an image to anyone, remove location data — the browser-based EXIF remover works on any device.
5. Prefer your provider's patient portal over email or chat for sharing.
6. When showing a photo in person, open only that photo; do not hand over the unlocked phone.

For documents like insurance cards and IDs, see our page on ID documents.