Short answer: mostly, yes. The well-known scanner apps are made by real companies with reputations to protect, and scanning a gas receipt is not a risky act.
But "mostly" is doing some work in that sentence. A scanner app sees the most sensitive paper you own — your passport, your lease, your medical results, the ID you photographed to open a bank account. And a handful of apps in this category make their money in ways you'd never agree to if it were spelled out: ads, trackers, data collection bundled into a free tier. The app that scans your ID deserves five minutes of scrutiny. Here's exactly what to check.
First, know what a scanner app can see
When you scan a document, the app doesn't just get a picture. Most scanner apps also read the text on the page to make it searchable — which means the app (and potentially its servers) processes your name, address, account numbers, dates of birth, whatever's on the paper. That's fine when the company's incentives are aligned with yours. It's the whole problem when they aren't.
So the real question isn't "is scanning safe?" It's: where does the scan go, and who profits from what? Six checks answer that.
Check 1: where are your documents actually stored?
There are three honest answers, and the app's description or settings will usually tell you which one you're getting:
- On your phone only. Safest. The scan lives in the app's storage on your device; losing the phone is the main risk, which a passcode and Face ID cover.
- In your own cloud — your iCloud, your Google Drive. Still good: the company hosting it works for you, under your account.
- On the app company's servers. Not automatically bad — sync and backup have to live somewhere — but now their retention policy, their security, and their business model all matter. This is the arrangement worth reading the fine print on.
Red flag: an app that's vague about it. "Your documents, everywhere you go!" is a storage location description written by the marketing team.
Check 2: does it demand an account before you can scan?
A required sign-up isn't sinister by itself — cloud sync genuinely needs one. But an account ties every scan to your identity and usually means your documents ride along to the company's servers by default. If an app won't let you scan a single page without handing over an email address, ask why a camera feature needs to know who you are.
Good sign: apps that work fully without an account, or where the account is clearly optional and tied to a specific feature like sync.
Check 3: read the App Store privacy label (it takes one minute)
Every app's App Store page has an "App Privacy" section — a label the developer must file with Apple. Scroll to it before you install. You're looking for three tiers, from best to worst:
| Label section | What it means for a scanner app |
|---|---|
| "Data Not Collected" | The developer says nothing leaves your device tied to you. Rare and excellent. |
| "Data Not Linked to You" | Some data is collected (often diagnostics) but not tied to your identity. Usually fine. |
| "Data Used to Track You" | The app shares data with brokers or ad networks to follow you across other apps. On a document scanner, this should stop you cold. |
The label is self-reported, so it's a floor, not a guarantee — but a scanner app that admits to tracking is telling you its business model out loud.
Check 4: what does "free" pay for?
Scanner apps generally fall into two camps. Subscription apps charge you money, which is refreshingly straightforward: you're the customer. Free apps have to pay their engineers somehow, and the options are a paid upgrade tier (fine), ads (annoying but visible), or data collection and tracking (the quiet one). None of this requires villainy — it's just economics — but you should know which deal you're taking before the deal involves your passport.
The two-minute version of due diligence: skim the privacy policy for the words "third parties," "advertising," and "affiliates," and see what's being shared with whom. A good policy says plainly what's collected and why. A policy that takes 4,000 words to avoid saying where your documents go has answered your question anyway.
Check 5: does the app lock?
Storage and servers aside, the most common way a scanned ID leaks is the undramatic one: someone picks up your unlocked phone. A scanner app that holds sensitive documents should lock behind Face ID or your passcode, separately from the phone itself — here's how Face ID protection actually works and why it's the right lock for a document vault. Many scanner apps offer a passcode as an option buried in settings; turn it on the day you install.
Check 6: what happens when you share?
Scans exist to be sent — to landlords, accountants, HR. Check what the app does on export: some route shares through a company link server, others hand you a plain PDF to send however you like. A plain local PDF keeps you in control; a hosted link means the document now lives at a URL. If you send sensitive paperwork often, it's worth learning how to share documents securely from an iPhone regardless of which app made the scan.
How Paperlock answers these six checks
Since we're asking every app these questions, here are Paperlock's answers, plainly. Documents are stored encrypted on your phone using iOS Data Protection. There's no account — no sign-up, no email. The app locks with Face ID on open and again after about a minute in the background, and IDs and passports show blurred thumbnails until you re-confirm with Face ID. There are no third-party analytics or tracking SDKs. Reading and question-answering happen partly on Paperlock's servers over an encrypted connection, and documents are processed just long enough to answer — never stored there, never used for training or ads. Optional iCloud sync keeps an encrypted copy in your own iCloud, off by default. The how it works page has the full picture, and if you're weighing it against a traditional scanner, Paperlock vs CamScanner covers the honest differences. It's coming soon to iPhone.
Already scanned your ID with an app you're unsure about?
Don't panic — audit. Open the app and check whether your scans were uploaded to an account; delete what you don't need, both in the app and in any cloud tab it has. Check Settings → Privacy & Security → Photos to see which apps can read your camera roll, and trim the list. And for the next sensitive scan, the built-in scanner in Apple Notes is free, works offline, and answers every question on this page by never involving anyone else at all.
Five minutes of checking, once per app. That's the entire cost of never having to wonder where your passport went.