How to Share Medical Records Safely: Merge, Redact, and Encrypt Before You Send

A specialist referral or an insurance claim usually arrives with the same instruction: send us your records. What you actually have is a folder of discharge summaries, lab results, imaging reports, and letters accumulated over years, from three different clinics, in four different formats. The temptation is to zip the whole thing and be done with it. That is exactly the wrong move. Health information is among the most sensitive data you will ever handle, and the person on the other end almost never needs all of it to do their job properly.

Start by deciding what the recipient genuinely requires. A knee surgeon needs the imaging, the orthopaedic notes, and your current medication list. They do not need a mental health consultation from a decade ago, a fertility workup, or a relative's details that happen to appear on a shared insurance form. Write down the scope in one sentence before you touch a file. Then gather only the matching documents, convert any scans with Image to PDF, and use merge to build a single chronological pack so the reviewer reads a coherent story rather than shuffling attachments.

Next comes the part most people skip. Within the pages you are sending, there will still be lines that fall outside the agreed scope: an unrelated diagnosis in a summary paragraph, an old address, a national insurance number printed in a header, a family member's name. Use redact to remove that content permanently. This matters because drawing a black rectangle in an annotation tool only covers text visually. The words are still in the file and can be copied straight out. Proper redaction deletes the underlying content, so what is hidden is genuinely gone.

With the pack trimmed, encrypt it. PdfWill's protect tool applies AES encryption, so the file is unreadable without the password even if the email is forwarded, archived on a server for years, or exposed in a breach at either end. Send the password through a different channel entirely: a phone call to the clinic's reception, a text message, or a secure patient portal message. A password included in the same email as the attachment provides no protection at all, which is the single most common mistake in medical correspondence.

The reason to do all of this in the browser rather than a web service is straightforward. Every tool on PdfWill runs locally on your own device, so your records are never uploaded, never sit in a processing queue, and never appear in someone else's backup. There is no server copy to delete afterwards and no retention policy to read. For documents that describe your body and your history, that difference is not a technicality. Keep an unredacted master in your own encrypted storage, send the narrow version, and you have satisfied the request without oversharing a single line.