How to Audit Your Mac Apps for Privacy

You installed that screenshot tool three years ago. You barely remember doing it. But right now, it has access to your screen recording, your microphone, and your full disk — and it’s making network requests to servers in three different countries.

This isn’t hypothetical. Most Mac users have at least a handful of apps with permissions they never consciously granted, sending data they never agreed to share. The fix isn’t paranoia — it’s a simple audit.

Here’s how to check what your apps are actually doing, using tools you already have.

Why you should audit your apps

macOS has strong privacy foundations. App Sandbox, Gatekeeper, notarization — Apple has built real guardrails. But those guardrails have gaps. An app that’s been notarized and sandboxed can still collect analytics, phone home with usage data, and upload your clipboard contents to a remote server.

The permissions model is opt-in, but most people click “Allow” without thinking twice. Over time, you accumulate a pile of permissions you’ve forgotten about, attached to apps you barely use.

An audit takes about fifteen minutes and can reveal surprising things about what’s running on your machine.

Check privacy permissions in System Settings

The first step is the simplest. Open System Settings > Privacy & Security and walk through every category.

A clipboard manager doesn’t need your camera. A weather app doesn’t need Full Disk Access. If something looks wrong, revoke the permission. The app will ask again if it actually needs it.

Also check System Settings > General > Login Items & Extensions. Background apps that launch at startup are the most likely to be silently collecting data.

Use Activity Monitor to spot suspicious behavior

Activity Monitor is built into every Mac. Open it from Applications > Utilities or search in Spotlight.

Click the Network tab. Sort by Sent Bytes. Any app that’s sending significant data should catch your attention — especially utility apps that should be working locally.

Activity Monitor won’t tell you what is being sent, just how much. For deeper inspection, you need a network monitor.

Monitor network connections with Little Snitch

Little Snitch is the gold standard for monitoring outbound connections on macOS. It shows you every connection every app makes, in real time, and lets you allow or deny them individually.

Install it, and within a day you’ll have a clear picture of which apps phone home — and how often. Common findings that surprise people:

• Text editors sending crash reports every launch
• Menu bar utilities pinging analytics servers hourly
• Free apps checking license servers they don’t need
• Clipboard managers uploading usage statistics

You don’t have to block everything. The point is awareness. Once you see what’s happening, you can make informed decisions about which apps deserve your trust.

What to look for in a privacy-respecting app

After running an audit, you’ll start to notice patterns. The best apps share a few traits:

• Minimal permissions. They ask for only what they need.
• No network activity. Especially for utility apps that work with local data.
• No analytics or telemetry. They don’t track how you use them.
• Local storage. Your data stays on your machine.
• Transparent pricing. One-time purchase or open source — no incentive to monetize your data.

Privacy isn’t a feature you can bolt on after the fact. It’s an architecture decision. Apps that are built offline-first from day one don’t have telemetry to disable, data collection to opt out of, or privacy policies to read. They just work — quietly, locally, and privately.