The best PDF signing app for iPhone that does not upload your documents (and how to check)

Honest answer first: the best PDF signing app for iPhone that does not upload your documents is already on your iPhone, and it’s free. Apple’s Markup signs a PDF entirely on the device. If you sign something a couple of times a year, install nothing, read the next section, and you’re done.

The reason this page exists is the second half of the question. Every app on the App Store that wants your business now writes “on-device”, “private” or “nothing uploaded” in its own description — and that is a claim the developer typed, not something Apple verified. So after Markup, this page gives you three checks you can run on any signing app in two minutes, and then explains where Signed sits once you’ve run them on it.

If you want the step-by-step rather than the choosing, that’s how to sign a PDF on iPhone without uploading it to a website. This page is about picking the tool.

The free one that definitely doesn’t upload: Markup

Markup is built into Mail, Files and Photos, and it signs a PDF without the file leaving the phone:

Open the PDF — tap the attachment in Mail, or open it from Files.
Tap the Markup icon (the pen tip) in the top corner.
Tap + → Add Signature, draw one with your finger, drag it onto the line.
Tap Done. From Mail the signed copy drops into a reply; from Files it’s saved in place.

There’s no server in that sequence. Apple doesn’t receive the PDF, and there is no account, no upload and no “processing”. For an occasional signature this is the correct answer, and no app — including ours — is a better choice for privacy than a tool that has no network step at all.

Markup’s limits are the familiar ones: the signature is a fresh finger-drawing most times, dates and initials are text boxes you nudge into position, and a document that wants initials on every page is slow going. Those are convenience problems, not privacy problems — which is exactly what makes a signing app worth considering, and exactly why it must not cost you the privacy Markup gives you for free.

Why “on-device” in a listing proves nothing — and the three checks that do

An App Store description is marketing copy. It’s written by the developer, and “we never upload your documents” costs nothing to type. Here’s how to check it instead of trusting it. Each test takes under a minute, and together they catch almost every app that quietly routes your file through a server.

1. Read the App Privacy label, not the description

Scroll down any App Store listing to App Privacy. This card is still filled in by the developer, but it’s a structured declaration Apple requires and can hold them to, which makes it far more useful than the prose above it. What you’re looking for on a signing app:

“Data Not Collected” is the cleanest possible answer: the developer declares the app collects nothing at all.
“Data Not Linked to You” listing only things like Diagnostics or Usage Data is also fine — that’s crash reports and anonymous analytics about the app, not the contents of your PDF.
Red flag: User Content, Files and Docs or similar under Data Linked to You. That’s the developer telling you, in Apple’s own vocabulary, that your documents are collected and tied to your identity. Whatever the description says, believe the label.

One honest limit: the label describes what’s collected, not every byte that transits. An app could theoretically pass your file through a server for processing without keeping it, and the label wouldn’t necessarily show it. Which is why the next check exists.

2. The Airplane Mode export test

This is the one that can’t be faked. Turn on Airplane Mode (and make sure Wi‑Fi is off too). Open the app, import a PDF from Files, sign it, and export the signed copy to Files or a Mail draft.

If the whole flow works with the radio off, nothing left the phone. There was nowhere for it to go.
If the app stalls on a spinner, throws a “no connection” error at import or export, or the signature won’t apply, the signing happens on a server — however the listing describes it.

Run this before you sign anything real, with a throwaway PDF. It’s the single most reliable test on this page, and it’s the same test behind signing a PDF offline without internet on iPhone.

3. Can you export without creating an account?

A local signing app has no reason to know who you are. If an app lets you import and sign but makes you sign in or register before you can export the signed PDF, your document is being tied to a server-side identity — that’s what the account is for. Free tiers with “3 documents per month” limits are the same signal: a monthly quota has to be counted somewhere, and that somewhere isn’t your phone.

None of this makes cloud e-sign services bad. They’re built for businesses sending contracts out to other people, with audit trails and signer verification, and that genuinely needs a server. It just has nothing to do with you signing a lease someone emailed you and sending it back. For the wider picture of where each kind of tool puts your document, see is it safe to sign documents online?.

What a signing app should add over Markup — without subtracting privacy

If you sign monthly or more, or you’d like the signature on the page to look like yours rather than a shaky glass-drawing, this is what you’re actually paying for:

A saved signature that’s identical on every document — drawn properly once, typed in a real handwriting style, or photographed from paper.
Initials and today’s date as one tap each, on every page that needs them.
A flattened PDF export that opens cleanly in whatever the other side uses.
Nice-to-haves: a scanner for paper documents, a Face ID lock on the app.

Every one of those can be done on the phone. If an app needs a server to deliver them, it’s chosen to, and you’re entitled to ask why.

Signed, with the three checks applied

Signed is built the way Markup is: there is no Signed cloud and no account. The PDF you import, the signature you create and the signed copy you export are stored only on your iPhone. Rather than ask you to take that on trust, run the checks:

Privacy label: it’s on the listing like every other app’s — read it the same way you’d read a stranger’s, and hold us to it.
Airplane Mode: radio off, import from Files, drop your saved signature, add initials and date, export. It works, because there was never a network step to break.
Account: there isn’t one to create. Exporting is a share sheet, not a login.

What you get for the install is the convenience list above: a signature you create once (draw it, type your name in a handwriting style, or scan the one you use on paper), initials and date on any page, a seal or stamp if your paperwork wants one, a built-in scanner for the paper copy, and an optional Face ID lock so even someone holding your unlocked phone can’t open your documents. If you want to see what the typed styles look like before installing anything, the free signature generator renders them in your browser.

The comparison across the other axis — Markup, Adobe, cloud e-sign and Signed ranked by how often you sign — is in the best app to sign documents without printing. This page is the privacy filter; that one is the convenience ranking.

The short version

Markup is free, built in, and never uploads. For an occasional signature it’s the best “app that doesn’t upload” there is.
“On-device” in a listing is a claim. Check the App Privacy label, run the Airplane Mode export test, and see whether you can export without an account.
A good signing app adds a saved signature, initials and date — and loses nothing on privacy, because none of that needs a server.
Signed passes all three checks by design. Run them anyway.