How does Microsoft Presidio run 100% locally on macOS?

PII Finder packages the Microsoft Presidio engine directly inside the native macOS binary, compiled for Apple Silicon and Intel. When scanning files or text, all pattern recognition, contextual entity analysis, and high-entropy Shannon evaluation run entirely in local RAM on your Mac. No network sockets are opened, and no data is ever transmitted to remote servers.

What technical PII entities, secrets, and high-entropy patterns are detected?

The engine detects personal PII (Full Names, US SSNs, Credit Card Numbers, Email Addresses, Phone Numbers, Physical Addresses) as well as developer secrets: Stripe API keys (sk_live), OpenAI keys (sk-proj), AWS Access Keys, GitHub PATs, Slack/SendGrid tokens, JWT tokens, and high-entropy Shannon strings (database passwords & RSA private keys in .env files).

How does the Real-Time Directory Watcher and Finder Sensitivity Tagging work?

Just like a virus scanner, Directory Watcher monitors your designated directories (like ~/Downloads or ~/Documents) using native macOS FileSystem event listeners. When a new or modified file is detected, PII Finder automatically evaluates its sensitivity and applies native macOS Finder color tags (Red for Critical PII like SSNs and API keys, Orange for Financial data, Yellow for Contact PII, and Green for Clean files) so you immediately know the risk before opening or sharing.

How does the macOS Right-Click Context Menu quick redaction work?

PII Finder integrates directly into the macOS Quick Actions context menu. You can right-click any single file or directory directly inside Finder, select "⚡ Redact PII with PII Finder", and the app will generate a clean, sanitized copy right next to the original in milliseconds.

Is PII Finder a subscription or a one-time purchase?

PII Finder is available for a $14.99 early-adopter launch special ($19.99 regular) as a single one-time purchase on the Mac App Store. No recurring monthly subscriptions, no seat tiers, and no hidden fees. Your purchase includes lifetime updates and Apple Family Sharing.

Can I set up custom secure seeds for internal company codenames and IPs?

Yes! You can define custom seed rules to replace specific values (e.g. internal server IP addresses, confidential project codenames, or custom account IDs) with consistent anonymized placeholders across all your documents and logs.

Does PII Finder help with GDPR, HIPAA, and SOC2 compliance?

Absolutely. By sanitizing sensitive healthcare numbers (SSNs/MRNs) and personal data locally before uploading prompts to external LLMs or third-party vendors, PII Finder satisfies HIPAA Safe Harbor redaction standards, GDPR Article 32 data security controls, and SOC2 confidentiality requirements.

Privacy & Security

Privacy Policy

Name: PII Finder
Price: 14.99 USD
Availability: InStock
Rating: 4.9 (128 reviews)
Author: PII Finder

Last updated: August 9, 2026. 100% Local-Only Data Guarantee.

1. 100% On-Device Processing Architecture

PII Finder is built from the ground up to operate completely offline. All document parsing, entity recognition (Microsoft Presidio), high-entropy secret detection, and file masking occur strictly inside your Mac's RAM and CPU/GPU. PII Finder does not collect, transmit, store, or upload any document content, text input, or scanned metadata to any remote servers.

2. Zero Telemetry & Zero Data Collection

We do not track your usage, scanned file names, PII counts, or document contents inside the macOS application. The desktop application has zero analytics trackers, zero external SDK phone-homes, and zero network calls.

3. Contextual macOS Permissions & File Sandboxing

PII Finder operates strictly within the macOS App Sandbox. It only accesses files and folders you explicitly open via native file picker dialogs, drag and drop, or directories you specifically designate for monitoring (such as ~/Downloads). Native Finder sensitivity tags are written exclusively to local file attributes without modifying file permissions or transmitting metadata.

4. Secure Seeds Vault & Biometric Keychain

When configuring custom detection seeds (such as personal names, internal project code words, or proprietary customer identifiers), all sensitive patterns are encrypted locally with AES-256-GCM. Encryption keys are safeguarded inside the macOS Keychain with hardware-backed Touch ID and Apple Secure Enclave protections.

5. Apple App Privacy Label: Data Not Collected

On the Apple Mac App Store, PII Finder qualifies for the strictest "Data Not Collected" privacy label. The developer does not collect any data from this app across any category (identity, contact info, usage data, diagnostics, or financial info).

6. App Store Licensing & Transactions

All app purchases and license validations are handled directly by Apple via the Mac App Store. We do not process or store credit card numbers, billing addresses, or personal payment details.

7. Contact Us

If you have questions regarding our privacy architecture or security audit reports, please contact our security team at privacy@piifinder.app.