What Mac apps can see about you, permission by permission
· 7 min read
A Mac app can see surprisingly few things by default: its own files, whatever you open in it, and the name of the app that is in front. Everything beyond that is gated by a permission in System Settings, Privacy & Security, and each switch unlocks a specific, knowable set of data. The ones that matter most are Accessibility, Screen Recording, Input Monitoring and Full Disk Access, because those four can reach into other apps. Here is what every permission actually grants, so you can read the list on your own Mac and know what each app has been given.
What an app sees with no permissions at all
Before the switches, it helps to know the baseline. Without asking you anything, an app on macOS can:
- Read and write inside its own folder in ~/Library (Application Support, Caches, Preferences).
- Open any file you drag onto it or choose in an Open dialog.
- Know which app is frontmost, by name and bundle identifier, and when that changes. This is public to every app and needs no permission.
- See the screen size, keyboard layout, time zone, your user name, and basic hardware details.
- Make network connections, unless the app is sandboxed without the network entitlement. There is no permission prompt for general internet access on a Mac.
What an app cannot see without asking: the contents of other apps’ windows, window titles, keystrokes typed elsewhere, your Desktop, Documents and Downloads folders, your Mail and Messages databases, your camera, microphone, contacts, calendar, photos, or location.
That last list is what the rest of the permissions pane protects. Note that frontmost app name is on the first list, not the second. That is how Punchcard can record which app was in front all day while asking for zero permissions: the app name is public, the window title is not, and Punchcard only uses the name.
The four that reach into other apps
These are the ones to read carefully when an app asks.
Accessibility. Built for assistive technology, and broad as a result. An app with Accessibility can read the interface of other apps (buttons, text fields, menu items, window titles) and can post synthetic clicks and keystrokes. Window managers, text expanders and automation tools need it; many other apps ask because it is the easiest way to get window titles. Fuller breakdown in accessibility-permission-on-a-mac-what-it-grants-and-why-apps-ask.html.
Screen Recording (called Screen & System Audio Recording on recent versions). Lets an app capture the pixels of your screen, any window, and on newer versions the system audio. It also unlocks window titles of other apps through the window list. Screenshot tools, screen sharing and video call apps need it. Recent versions of macOS show a menu bar indicator during capture and periodically re-ask you to confirm apps that keep this permission.
Input Monitoring. Lets an app observe keystrokes and other input sent to other apps. Keyboard remappers and some macro tools need it. Anything else asking for it deserves a hard look, because this is the permission that makes a keylogger possible.
Full Disk Access. Removes the per-folder protections and opens the sensitive areas of your home folder: Mail, Messages, Safari data, Time Machine backups, other users’ files. Backup tools and terminal apps used for development legitimately need it. It cannot be requested with a dialog; you have to add the app to the list yourself, which is a useful speed bump. See full-disk-access-explained-when-an-app-should-not-need-it.html.
The file and folder permissions
Files and Folders. When an app first reads your Desktop, Documents, Downloads, a removable drive, or a network volume, macOS asks. The grant is per folder, per app, and each one is listed under Files and Folders. Most apps legitimately accumulate a few over time, and the grant is narrow: access to Downloads says nothing about Documents.
App Management (modifying other apps’ bundles) and Developer Tools (running software that fails the usual code checks) round out this group. Updaters and development environments need them; nothing else should.
The sensors and personal data
- Camera and Microphone. Self-explanatory, with an indicator in the menu bar (a green camera, an orange microphone dot) while in use.
- Location Services. Precise location from Wi-Fi positioning. The arrow indicator shows when it is being used.
- Contacts, Calendars, Reminders, Photos. Each opens the corresponding library. Photos is the one people forget: it covers your whole library, including location metadata on each picture.
- Bluetooth. Lets an app scan for and talk to nearby devices, which also reveals a lot about your surroundings.
- Local Network. On recent versions, an app must ask before scanning the devices on your home or office network.
- Speech Recognition. Sends audio to Apple for transcription on the app’s behalf.
- HomeKit, Motion & Fitness, Focus, Passkeys Access. Narrow and rarely requested on a Mac.
Automation belongs in this group too, though it reads nothing directly. It controls whether one app can send Apple events to another, which is how AppleScript and Shortcuts work. The prompt names both apps (“X wants to control Finder”), and the grant is per pair. An app controlling Finder can read file listings; an app controlling a browser can often read the current page. It can reach nearly as far as Accessibility, one app at a time.
How to audit your own Mac in ten minutes
- Open System Settings, then Privacy & Security.
- Start with Accessibility. For each app listed, ask whether you know why it is there. A window manager, yes. A time tracker, a note app, a menu bar utility you installed two years ago: ask why.
- Do the same for Screen & System Audio Recording and Input Monitoring. These lists should be short.
- Open Full Disk Access. Anything you do not recognize, switch off and see what breaks. Usually nothing.
- Open Files and Folders and scan for apps that have Desktop, Documents and Downloads all at once. That is often an app that asked for everything at first launch.
- Open Automation and look at which apps can control your browser and Finder.
- Finally, check Login Items & Extensions under General. An app that runs in the background with Accessibility is a different proposition from one you open once a week.
Switching a permission off does not uninstall or break the app; the next attempt fails and a well-built app explains what it needs. For a clean slate on one app, the Terminal command tccutil reset All com.example.bundleid clears every grant for that bundle identifier.
What this means for choosing apps
Every permission an app holds is a capability you cannot audit from the outside. You can see that an app has Accessibility; you cannot see what it reads with it. So prefer apps whose job does not require the broad permissions, and be suspicious when the permission asked for is larger than the job.
Time tracking is the clearest example. The job is “which app was I in, for how long,” and the app name is public. A tracker that wants Accessibility or Screen Recording is asking for window titles, document names and URLs on top of that. Punchcard uses the public information only and cannot tell you which document you were in, which is the point. For more on the trade, see why-most-time-trackers-want-your-window-titles-and-what-that-means.html.
Questions
Can an app read my clipboard without a permission?
Yes. On macOS there is no permission for the clipboard; any running app can read it at any time, silently. Clipboard managers rely on this, and so could anything else.
Does “no permissions” mean an app cannot use the internet?
No. General network access is not a permission on a Mac. An app with nothing in Privacy & Security can still upload whatever it already has access to. To know whether an app talks to the internet you need a different check: Activity Monitor’s Network tab is the quickest.
If I deny a permission, will the app tell me what it needed it for?
Good ones do, in the prompt text (the developer writes the reason string) or in a follow-up explanation. A broad demand with no reason is itself information.
Why does an app I granted Screen Recording keep asking me again?
Recent versions of macOS periodically re-confirm apps that hold screen capture access. It is a reminder, not a bug.