A privacy workbench for your health export

Keep the slice.
Leave the trail.

Choose the dates, record types, and fields you meant to share. Precise location and common identifiers are blocked before anything leaves your device.

Opens CSV and Apple Health XML
Never uploads or retains health records
Documents every removal

Paper health records pass through a concrete sorting machine; location markers are trapped while a small neat stack exits. — Your file enters the browser. Only the minimized copy comes out.

The cleaning bench

Make a bounded copy

1InspectChoose a source
2MinimizeSet the boundary
3ExportReview and save

Place an export on the bench

Supported: comma-separated CSV and Apple Health export.xml. Files stay in this browser tab and are limited to 100 MB / 500,000 records for safety.

Choose or drop a health export CSV or XML · maximum 100 MB

No account or installation required.

Source ready

health-export.csv

Format: CSV
Records: 0
Size: 0 KB
Date span: Not detected

1 Set the date boundary

Rows with a detected date outside this range will be left out. Undated rows stay in the copy.

From Through

2 Choose record types

3 Choose fields

Common identifiers, device details, GPS, location, and route fields are locked out. Review unfamiliar fields yourself.

4 Reduce timestamp precision

Day2026-08-28 · safest default Hour2026-08-28 14:00 ExactKeeps the source timestamp

03 / OUTPUT CHECK

Review what leaves

0 rows

0 rows keptinside your boundary

0 rows left outby date or type

0 fields removedidentifiers plus your choices

Minimized does not mean anonymous.

Values, dates, rare conditions, and combinations of records can still identify someone. Inspect the preview and the downloaded file before sharing.

Your records never leave this tab.One ZIP: the cleaned CSV and its plain-language provenance note.

Move cleaner preferences

Export or import the timestamp preference only. Health records are never stored.

Import preferences

Honest limits

A smaller file, not an anonymity guarantee

The cleaner recognizes common identifier and location column names, but vendors can invent new ones. Free text and unusual measurements may be identifying even when they are not labeled as such.