Security & trust

MacSweep is built so you stay in control at every step — nothing moves without your confirmation, and every build is verified by Apple before it reaches you.

Apple-notarized & Developer ID signed

Every MacSweep release is submitted to Apple's notary service, which scans the binary for malicious code before issuing a notarization ticket. macOS Gatekeeper verifies that ticket on first launch, so the app cannot run if the signature has been tampered with after signing.

Signed by Apple Developer ID · Team ID FZUGD25X69 · Bundle ID com.macsweep.app

Local & private

MacSweep runs entirely on your Mac. Disk scans, cache analysis, and cleanup decisions happen on-device — no file paths, file contents, or scan results are sent to MacSweep servers. Anonymous product analytics are on by default to help improve the app, and can be turned off anytime in the app (Privacy Guardian); the app discloses this on first run. Even when on, only coarse usage events (which features are used, action names, size buckets, app version, license tier) are collected — never file paths, file names, scan results, or personal content.

Review-first cleanup

MacSweep never deletes anything without showing you what it found first, and every cleanup action requires your explicit confirmation — it does not silently run permanent cleanup. File cleanup moves selected files to the Trash where macOS supports it, so you can recover them. Some cleanup is permanent by nature: emptying the Trash and temp cleanup clear directory contents, and Docker cleanup uses Docker's own APIs. MacSweep tells you which is which before you confirm.

What MacSweep doesn't do

• It doesn't send your file names, file contents, or scan results anywhere — analysis happens entirely on your Mac.
• It doesn't send file names, file contents, or scan results as telemetry. Anonymous product analytics are on by default (coarse usage events — which features are used, action names, size buckets, app version, tier — never personal data) and can be turned off anytime in Privacy Guardian.
• It doesn't bundle other software, toolbars, browser extensions, or third-party offers — installing MacSweep installs only MacSweep.
• It doesn't use fake "infection" warnings, scareware, or pressure tactics. Pricing is a clear one-time purchase, shown up front.
• It doesn't start downloads automatically, and it doesn't remove anything without your confirmation.
• It doesn't require an account to use the free tier, and it never sends your files, file paths, or scan results anywhere. Its only network connections are update checks, the license-revocation list, and the anonymous analytics you can turn off — all listed on the privacy page.

Who builds MacSweep

MacSweep is built and maintained by an independent Mac developer — a small, focused project, not a faceless "optimizer" brand. It is distributed only from macsweep.app and signed with a verified Apple Developer ID (Team ID FZUGD25X69), so macOS — and anyone who inspects the app — can confirm exactly who signed it.

Questions, security reports, or IT/procurement review go to support@macsweep.app (see also /.well-known/security.txt). A real person answers.

Verify the download yourself

If you want to confirm the app is exactly what Apple signed, you can verify it locally. Run these commands in Terminal after installing:

codesign --verify --strict --verbose=2 /Applications/MacSweep.app

spctl -a -vvv -t exec /Applications/MacSweep.app

To verify a downloaded DMG before opening it:

xcrun stapler validate MacSweep-*.dmg

Published SHA-256 checksums for every release are on the Releases page.

For IT & managed environments

MacSweep is distributed exclusively from macsweep.app — there is no other official distribution channel. Details for allowlisting and policy configuration:

• Bundle ID: com.macsweep.app
• Team ID: FZUGD25X69
• Download source: releases.macsweep.app
• Security contact: support@macsweep.app
• Vulnerability disclosure: /.well-known/security.txt