An iPhone app is packaged as a local OCR service with web upload, a JSON API on port 8000, and Vision Framework results that include text boxes. The privacy claim is plausible as a local-processing design, but the security question moves to who can reach that same-network HTTP server and what gets logged or retained.