PCC-Check
A browser extension and clinician dashboard that warns telehealth patients and independent therapists whether an AI tool they're about to use runs on verifiably-audited private compute (like Apple's PCC) or on unverified infrastructure that could expose session data.
telehealth patients and independent therapists using AI note-taking, transcription, or chatbot tools with sensitive clinical conversations
- One-click 'verify before you paste' warning on supported AI sites
- Plain-English badges for PCC-audited vs unverified vendors
- Retention and training-on-data indicators highlighted in red
- Therapist-side summary of vendor audit status to share with clients
Apple just published SOC 3 audit reports for PCC and the press cycle is heating up around auditable private AI compute, yet patients and small-practice clinicians have no easy way to translate those audits into 'should I trust this tool?' decisions.
APA 2025 Practitioner Pulse Survey and multiple 2025-2026 articles show growing therapist AI adoption paired with persistent privacy concerns; CBC reported therapists actively debating AI transcription privacy in clinical settings — real but narrow demand.AI in the therapist's office: Uptake increases, caution persists ↗Therapists say AI can help them help you, but some see privacy concerns ↗
A direct adjacent competitor already exists: HIPAA Shield (patient-protect.com), a free open-source Chrome extension that warns clinicians when PHI is typed into AI chat tools, backed by a broader HIPAA compliance platform with breach intelligence — the PCC-specific verification angle is novel but the adjacent problem space is occupied.HIPAA Shield — Free Chrome Extension That Detects PHI in Browser Forms ↗GitHub - patient-protect/hipaa-shield: Chrome extension that warns when PHI is entered into AI chat interfaces ↗
The closest competitor (HIPAA Shield) is MIT-licensed and free, anchoring user expectations at $0 for the extension layer; clinicians do pay for HIPAA compliance platforms (Patient Protect charges for its broader suite), but extracting willingness-to-pay for a narrow 'is this running on audited PCC?' check is harder.HIPAA Shield — Free Chrome Extension That Detects PHI in Browser Forms ↗
Apple is actively expanding PCC to third-party data centers (Google Cloud) and publishing VRE tools for independent verification — auditable private compute is a multi-year platform bet, and HIPAA enforcement pressure on AI tools is durable.Apple extends Private Cloud Compute to third-party data centers ↗Expanding Private Cloud Compute - Apple Security Research ↗
A browser extension is straightforward, but the core value — mapping each AI vendor to verified compute infrastructure — requires continuous manual auditing since most vendors do not publish standardized attestation; Apple's VRE only helps verify Apple-hosted workloads, not third-party AI services.Apple Private Cloud Compute Enables Security Audits Now 2026 ↗