What Does a Mac Cleaner Send Over the Internet?

A Mac cleaner needs wide access to your disk to do its job, so it is fair to ask what it sends back to its maker. You can answer that yourself for any cleaner in about ten minutes: read what its privacy policy says it collects, look at what access you have granted it in System Settings, check what it leaves running in the background, and watch its network activity while it scans. The steps below work for any app, including ours.

1. Read what the app says it collects

Going online is not a problem in itself. Most apps check for updates and confirm a licence. What matters is whether anything about your files leaves the Mac.

1. Open the privacy policy on the maker's own website, not a summary on a review site.
2. Look for the words analytics, telemetry, usage data, diagnostics and crash reports.
3. Check whether file names, paths or lists of installed apps are mentioned, and whether data is shared with other companies.
4. If the policy is vague or missing, treat that as your answer.

2. Check what access you have granted

1. Open System Settings > Privacy & Security > Full Disk Access.
2. Look at which apps are switched on. A cleaner usually asks for this so it can measure folders that macOS otherwise protects.
3. Switch off any app you no longer use or do not recognise.

Full Disk Access lets an app read Mail, Messages, Safari data and backups. Grant it only to apps from makers you are comfortable trusting with that.

3. See what runs in the background

1. Open System Settings > General > Login Items.
2. Under Open at Login, remove anything you do not need at startup.
3. Under Allow in the Background, look for helpers that belong to the cleaner and switch off the ones you do not want running all the time.

4. Watch the app's network activity

1. Open Activity Monitor from Applications > Utilities.
2. Click the Network tab.
3. Find the cleaner and its helpers in the list and note the Sent Bytes column.
4. Run a scan and watch whether the sent figure climbs while the scan is under way.

A small amount of traffic at launch is normal for an update or licence check. A steady upload during a scan deserves a question to the maker. Activity Monitor shows how much is sent, not where it goes or what it contains.

5. Check who signed the app

In Terminal, this command asks macOS whether an app is signed and notarised by an identified developer. Replace the name with the app you are checking.

spctl -a -vv /Applications/AppName.app

The output names the developer. It should match the company whose website you downloaded the app from.

What MacPrune sends, and what it does not

We built MacPrune, so here is the plain account for MacPrune v2.0. Scanning and cleaning happen on your Mac. No file names, paths, sizes or scan results are sent to us. The app has no analytics, no telemetry and no crash reporting.

It does go online for four things: to check for updates, to validate a Pro licence, to fetch the notice banner shown in the app, and to run the network speed test in the Monitor page when you click it. It is not an app that never touches the internet, and we would rather say so than have you find the connections in Activity Monitor and wonder.

MacPrune asks for Full Disk Access so the Disk map can measure the whole disk. It is downloaded from macprune.com, not the Mac App Store. Anything you choose to clean moves to the Trash after a confirmation, so a mistake can be undone until the Trash is emptied.

Where to go next

You can download MacPrune and run the checks above against it. For more on how the app treats your files, read is MacPrune safe. If you are weighing up payment models, see cleaners without a subscription, and for the cleaning itself start with how to free up Mac storage.