Doctors can dictate on a Mac, but where you dictate matters more than which app you use. Clinic notes, referral letters and patient letters belong in the electronic health record (EHR), written with the tools your hospital or practice provides, including any speech recognition built into it. A general Mac dictation app is for drafting outside the record: letter templates, teaching, papers, emails and admin, with no patient identifiers unless your institution has approved the tool. If any cloud service receives patient information, HIPAA expects a business associate agreement (BAA) first.
This page is general information, not legal, clinical or compliance advice. Your institution's policy decides which tools you may use with patient information.
Publisher note: SuprFlow publishes this guide and is one of the products discussed. Competitor details come from each company's own pages, checked on 3 October 2026. Prices and features change; confirm before you buy.
Where does dictation fit in a physician's day?
| Writing task | Where it should be written | General Mac dictation app? |
|---|---|---|
| Clinic and progress notes | In the EHR, with approved tools | Only if your institution approves it |
| Referral letters and letters to patients | In the EHR's letter function or another approved system | Only if approved; otherwise draft without identifiers |
| Letter templates, patient handouts, teaching, grant applications | Anywhere | Yes, with no patient details |
| Papers and audits using de-identified data | Under your research governance rules | Yes, if the data are properly de-identified |
| Email, rotas, committee and admin work | Your work email and documents | Yes, with patient details left out |
What does HIPAA require for any cloud step?
- Who is covered. 45 CFR 160.103 includes "A health care provider who transmits any health information in electronic form in connection with a transaction covered by this subchapter."
- Who is a business associate. The same section defines a business associate as a person who, on behalf of a covered entity, "creates, receives, maintains, or transmits protected health information" for a regulated function. A cloud service that receives your dictated audio or text about a patient is a candidate.
- The agreement. 45 CFR 164.502(e) says a covered entity may let a business associate handle protected health information if it "obtains satisfactory assurance that the business associate will appropriately safeguard the information", and that those assurances "must be documented through a written contract or other written agreement". That is the BAA.
- Risk analysis. 45 CFR 164.308 requires "an accurate and thorough assessment" of risks to electronic protected health information, and a dictation tool belongs in it.
The health IT office's Guide to Privacy and Security of Electronic Health Information (version 2.0, April 2015) explains them in plain language.
Every step that could receive patient information counts. Recognising speech on the Mac removes one recipient, but not a cloud formatting step, the app's history, the clipboard or wherever you paste. Medical dictation on a Mac and HIPAA goes through each one. Outside the United States, other laws and your employer's rules apply.
What counts as de-identified, and what does not?
Drafting without identifiers is the safest way to use a general app, but removing a name is not enough. HIPAA's safe-harbour method, 45 CFR 164.514(b)(2), lists identifiers that must be removed, including names, geographic subdivisions smaller than a state, "All elements of dates (except year)" directly related to the person, medical record numbers, and "Any other unique identifying number, characteristic, or code". You must also have no actual knowledge that what remains could identify the person.
The health IT guide adds a warning: "just removing the identifiers specified in the Privacy Rule may NOT make information de-identified." A letter that mentions a rare condition, a small town and a recent admission month can still point to one patient.
When is a dedicated clinical documentation product the better choice?
To dictate straight into the chart, or have the visit captured as a draft note, use a clinical product your institution buys. Two examples, in their maker's words:
- Microsoft describes Dragon Copilot as "an AI clinical assistant built to simplify and transform the way care teams work". Its page says it can ambiently capture conversations at the point of care, draft notes and referral letters, and integrate with supported EHRs including Epic. It lists a web browser, mobile app and desktop application for physicians.
- Microsoft describes Dragon Medical One as "speech-driven clinical documentation", naming EHRs from Epic, Oracle, MEDITECH and athenahealth, and presents Dragon Copilot as the next step for its users.
Neither page states macOS support, so ask Microsoft or your EHR team whether it runs on your Mac. Ask any vendor for its BAA and security documentation before patient information goes near it.
A physician's checklist before you dictate
- Read your institution's policy. Find out which dictation tools are approved, on which devices, and for which records.
- Never dictate patient identifiers into an unapproved tool. That includes names, dates of birth, hospital numbers, addresses and rare details that point to one person.
- Use placeholders such as "[PATIENT]" and "[HOSPITAL NUMBER]" when drafting letters, and complete them in the EHR.
- Know where every step runs. Check whether speech recognition happens on the Mac, whether any formatting step uses the cloud, and turn cloud steps off.
- Check what stays behind. App history, clipboard managers, synced notes apps and backups can hold copies.
- Dictate somewhere private.
- Read every line before it leaves your hands. A dropped "not" or a misheard number is easy to miss because the wrong word is spelled correctly.
How do you test a dictation app in 15 minutes?
We have not run a controlled benchmark of any dictation app, so test with your own voice and a fictional script.
- Dictate: "Dear Dr. Halvorsen-Achebe, thank you for seeing [PATIENT] in clinic. Please review in 6 weeks, not 16. The repeat test is due on the 14th, sorry, the 15th. Copy Ms. Tanaka-Byrne."
- Check the names, both numbers, the corrected date and the placeholder.
- Dictate two sentences of your specialty's terms, with no patient details. Add misses to the app's dictionary and repeat.
- Turn Wi-Fi off and repeat, to see which steps need the internet.
Apple's built-in Dictation is free; its Mac User Guide says Keyboard settings show whether general text dictation is processed on your device. Try it first.
Where does SuprFlow fit?
SuprFlow is a general Mac dictation app, not clinical software. It is not certified for any profession, offers no BAA, has no EHR integration and makes no promise about medical vocabulary. Do not use it with patient information unless your institution has approved it.
For non-patient drafting on an Apple Silicon Mac with macOS 14 or later, you hold Fn, speak and release, and the text is pasted at your cursor. Speech recognition runs on the Mac with an on-device model, Default formatting is local cleanup of punctuation, capitalization and numbers, and a personal dictionary can hold specialty terms. Optional cloud formatting sends transcript text, not audio, to the provider you pick; keep it off. It keeps a local history, uses the network for licence checks, updates and telemetry, and costs $125 once with no trial. It is the wrong choice for charting, ambient capture or anything needing a BAA. Where does my dictation go? lists every path.
Questions people ask
Can doctors use dictation software on a Mac?
Yes, for writing with no patient information, or with a tool your institution has approved. Notes and letters about patients go into the EHR through approved routes.
Is SuprFlow HIPAA compliant?
SuprFlow makes no such claim. It has no BAA and no certification. Compliance depends on your institution's whole workflow, not on one app.
Is there Dragon Medical for Mac?
Microsoft's current Dragon Copilot and Dragon Medical One pages do not state operating system support. Ask Microsoft or your EHR team.
Can I draft a referral letter at home and paste it in later?
Not with patient identifiers in an unapproved tool. Draft the body with placeholders, then complete it inside the EHR, if your institution allows that.
Related guides
- Medical dictation on a Mac and HIPAA
- Dictation for nurses and nursing notes
- Dictation software for therapists
- Where does my dictation go?
- Local vs cloud formatting
- Is Mac Dictation private?
Sources
- U.S. Government Publishing Office — 45 CFR 160.103, Definitions (1 October 2024 edition)
- U.S. Government Publishing Office — 45 CFR 164.502, Uses and disclosures of protected health information: General rules
- U.S. Government Publishing Office — 45 CFR 164.308, Administrative safeguards
- U.S. Government Publishing Office — 45 CFR 164.514, Other requirements relating to uses and disclosures of protected health information
- HHS Office of the National Coordinator for Health IT — Guide to Privacy and Security of Electronic Health Information, version 2.0, April 2015
- Microsoft — Dragon Copilot
- Microsoft — Dragon Medical One
- Apple Support — Dictate messages and documents on Mac