FileDial › Guides › Privacy and security
Is it safe to upload confidential documents online?
By Himanshu Ranjan · Updated 8 November 2026
Usually not worth the risk. Once you upload a confidential document to a free web tool, a copy sits on servers you cannot inspect, run by people you cannot vet. The FBI has warned about converter sites that scrape personal data, and researchers found 89,062 uploaded files exposed in one 2024 leak. For HR, legal, medical and financial files, do the job on your own Mac.
The short answer for confidential files
A free online converter takes your file, processes it on its own computers and returns a result. For a restaurant menu that is fine. For a performance review, a settlement draft, a patient letter or a client's bank statement, the question changes: you are no longer deciding whether the tool works, you are deciding whether to hand a copy of someone else's information to a company you know almost nothing about.
That distinction matters most when the file is not only yours. An HR manager, paralegal, bookkeeper or clinic administrator usually holds other people's data on trust. A leak that starts with a casual upload is hard to explain afterwards, even if the converter turned out to be honest.
What can actually go wrong
Two documented incidents show the range. On 7 March 2025 the FBI Denver Field Office warned that free online document converters are increasingly used to spread malware, and that some sites scrape the personal data in the files people upload, including identity numbers, banking and cryptocurrency details, email addresses and passwords. In the conversion scam it described, the tool works and returns the file you wanted, which is why it is easy to miss.
The second is accidental rather than malicious. Cybernews reported on 11 July 2024 that two online PDF services, PDF Pro and Help PDF, left Amazon S3 storage open, exposing 89,062 user-uploaded files including passports, IDs, certificates and contracts. Cybernews said the providers did not respond. Nobody was targeted; ordinary customers simply uploaded files and a storage setting was wrong.
- Malware in the returned file, as the FBI described
- Scraping of identity, banking or login details from uploaded files
- Misconfigured storage that exposes every upload, as in the 2024 case
- Files kept far longer than a privacy page implies, in backups or logs you cannot see
Questions to ask before any upload
If you really must use a web tool, treat it like onboarding a vendor. The FTC's guide for businesses on protecting personal information lists five principles: take stock of what you hold, scale down to what you need, lock it, pitch it when you no longer need it, and plan ahead. A casual upload fails most of them, because you cannot lock or pitch a copy that lives on someone else's server.
- Does the file contain anyone's personal, health, legal or financial details? If yes, do not upload it.
- Does the site say who runs it, where it is based and how long it keeps files? Vague answers are an answer.
- Is a signed agreement in place? A click-through banner is not one.
- Would you be comfortable explaining this upload to the person whose data it holds?
Industry by industry: where offline matters most
HR and legal files combine names, salaries, disciplinary details and privileged advice. Medical and clinic documents carry health information. Accountants and bookkeepers handle tax returns and bank statements. Students are not exempt either: a scanned passport for a visa form or a transcript is the same kind of file. This guide does not give legal or compliance advice, and no tool makes a workflow compliant by itself. The practical point is simpler: the fewer outside copies exist, the fewer places a leak can start.
How to do the same jobs without uploading
Your Mac can already do some of this. Preview merges and reorders PDF pages and exports at a smaller size, and the Finder Quick Actions menu can create a PDF or convert an image. For heavier jobs, FileDial runs every tool on the Mac and never uploads a file, and all tools work with Wi-Fi off. That includes the document tasks people usually reach for a website to do: Compress › Compress PDF (strong), Sign & Lock › Add password…, and Sign & Lock › Sanitize for sending…, which removes scripts, actions, attachments, comments and metadata and writes a fresh file.
FileDial saves results as a new file beside the original, so the confidential source is never overwritten unless a tool says so up front. Pair it with a Mac that has FileVault on and a short rule for your team: confidential files are processed locally, full stop.
- Select the file in Finder.
- Hold the right Option key to open the dial, or Control-click and choose Open in FileDial.
- Pick the tool, for example Sign & Lock › Sanitize for sending…
- Check the result card, then send the new copy and keep the original private.
Common mistakes that turn a convenience into an incident
The first mistake is assuming a file is harmless because the task is trivial. Merging two PDFs sounds boring, but if one of them is an offer letter and the other a signed NDA, the boring task moved two sensitive documents to a stranger. Judge the file, not the job.
The second is trusting the padlock in the address bar. HTTPS only protects the file between your browser and the site. It says nothing about who runs the site, how the files are stored or whether the storage is configured correctly, which is exactly what failed in the 2024 Cybernews case. The third is uploading a redacted draft that is not truly redacted: a black box drawn over text often leaves the text underneath, and an online tool will happily keep both. The guide on redacting a PDF properly explains why.
A fourth, common in small offices, is shared accounts and browser history. A tool signed into a personal Google account, or a link emailed to a colleague, creates copies and access you did not plan. Finally, people forget the output: the returned file can itself carry the FBI-described malware risk, so opening it on a machine that holds client data is a second exposure.
The fix does not need to be dramatic. Decide once, as a household or a team, which categories of file never go to web tools, write it in one line, and give people a local alternative so the rule is easy to follow. A rule without an easy alternative gets ignored under deadline pressure.
Questions
Is it ever fine to use an online converter?
Yes, for files with nothing private in them, such as a public flyer, a draft menu or a screenshot of a public web page. The risk comes from the contents. If you would be comfortable posting the file publicly, an upload costs little. If it holds names, health, legal or financial details, convert it on your own computer instead.
Do reputable converters delete my files after an hour?
Many say they do and some probably do, but you cannot verify it from outside. The 2024 Cybernews case, where two PDF services exposed 89,062 uploaded files through open storage, shows mistakes happen at ordinary services. A deletion promise states intent. It is not a control you can inspect or audit.
Does uploading a password-protected PDF help?
Only partly. A password protects the file against casual exposure, but most converters need the password to process it, so the service ends up seeing the content anyway. Protecting a file you are about to upload helps in transit and in storage, not against the service itself or a breach of it.
What should I tell a client who asks how I handle their files?
Be specific: client files are processed on an encrypted Mac, never in free web tools, and anything sent back is cleaned of hidden metadata first. A concrete description of your routine builds more trust than a general promise about taking security seriously, and it gives the client something they can check.