Offline Medical Dictation for Mac: No Cloud Audio, No BAA Required

Until recently, accurate speech recognition required compute power not available on a laptop. Cloud services (AWS Transcribe Medical, Google Speech-to-Text Medical, Nuance's Dragon Medical One, AssemblyAI, Deepgram) host large speech models on GPU servers and stream user audio to those servers for transcription. Accuracy on medical vocabulary can be very good, and the vendor handles the ongoing model maintenance; the cost is that your audio has to leave the building.

The architecture made sense for hospital deployments and large medical groups where a dedicated IT team can negotiate BAAs, monitor audit logs, manage network configurations, and absorb the operational overhead. For solo therapists and small mental- health practices, the same architecture imposes a much heavier relative compliance burden — the same BAA negotiation, vendor risk review, and ongoing compliance cost, with one or two clinicians to amortize it across.

Therapy and psychiatric notes contain particularly sensitive PHI. A progress note dictated by a therapist might include presenting problems (sexual, substance use, suicidal ideation), trauma history, family-of-origin details, and identifying information about the client. The same content protected under HIPAA also tends to be the kind of content a clinician would be most uncomfortable sending to a third-party server, even with a BAA in place.

Practical concern: even with the strongest contracts, audio sent to a cloud service exists on that vendor's servers for some retention window. Breach is rare but possible. For mental-health practitioners, "technically compliant but architecturally avoidable" is not the bar — the bar is "audio of session-adjacent notes does not leave my computer."

Apple Silicon (M1, M2, M3, M4) makes local speech recognition practical on a laptop. Sapience Med runs a quantized Whisper-large-v3-turbo model (OpenAI's open-source speech recognition model) on the Mac's GPU through Apple's Metal framework.

In practice the text appears in your EHR or Notes field about a second after you release the hotkey, the audio buffer is discarded, and the next dictation starts fresh. The work happens in a short burst after each dictation; between dictations the app sits idle.

For drug names, Sapience Med checks the model's output against a built-in medication vocabulary and your own custom words. We have not published an accuracy benchmark against cloud services, so the honest advice is to run the free trial on your own notes.

Sapience Med uses the word "offline" specifically about the audio path: your audio buffer is never transmitted off-device. Microphone capture → on-device transcription → text injection into your EHR or notes field. The audio buffer is discarded after transcription; the transcript itself is in your clipboard and the target text field, where you control it.

A few non-audio network calls do happen for legitimate operational reasons:

• License verification against license.sapience.systems — sends license_id + machine ID hash, no audio, no notes, no PHI. Happens at startup and periodically while the app runs.
• Update check for new app versions. Sends just the current version number; updates are signed with our Ed25519 key and verified locally before applying.

None of these touch your microphone, your transcripts, or your clinical notes. The app works fully offline for dictation — no internet connection needed for transcription itself. License verification gracefully tolerates network outage (cached JWT remains valid until its expiry).

A Business Associate Agreement is required when a vendor creates, receives, maintains, or transmits PHI on behalf of a covered entity. The triggering action is the vendor having access to PHI — audio of medical dictation typically counts as PHI.

Sapience Med's architecture is designed so that we never have access to your audio or your notes. We don't receive them, we don't transmit them, we don't store them. The license server (which we do operate) handles license_id and machine ID hash for the payment/activation flow — these are not PHI. So the BAA question for the voice path is functionally moot.

For full architectural detail and the legal reasoning, see our HIPAA architecture brief. The short version: Sapience Med is not your Business Associate because we never touch the protected health information.