Skip to content

Security & privacy

Safety isn't a setting. It's the design.

FastSweep is built so the dangerous default is impossible. Here's exactly how your files and privacy are protected — including what the app deliberately does not do.

Review-first by default

Every finding arrives with a reason, a size, and a proposed behavior. Nothing — not even confidently-safe cache files — is removed until you approve the review list.

Trash, not permanent delete

Cleaned files move to the Trash so you can recover them before emptying it. The only permanent path is the Shredder, and it demands an explicit per-file confirmation.

On-device scanning

Scans run entirely on your Mac. You can scan and review without an account, and file contents are never uploaded as part of scanning.

High-risk data is protected

Prompt histories, workspace state, vector data, and other personal context are classified high-risk: surfaced for review only, never auto-selected.

Every action is logged

A local audit log records each action with the item, path, size, behavior, and result, so you always have a record of exactly what FastSweep did.

Sensitive permissions stay visible

Camera, microphone, screen recording, contacts, location, and other sensitive grants are surfaced for review in the native system privacy panes.

Realtime protection, honestly

A watch that warns, not a wall that blocks.

Many cleaners advertise “kernel-level blocking.” FastSweep does not have it and will not pretend to. What it has is a user-space FSEvents file-event watch that alerts you the moment a known signature appears — and then waits for your decision.

01

It watches, in user space

The realtime monitor subscribes to macOS FSEvents file events and matches them against the local signature database. It runs as an ordinary user-space process.

02

It alerts, it does not block

A match becomes a detection record with a proposed quarantine action. FastSweep has no kernel extension and no kernel-level blocking, and it never claims otherwise.

03

It never acts alone

Detection records carry no autonomous filesystem action: nothing is moved, quarantined, or deleted until you confirm through the standard review and quarantine flow.

The same honesty applies elsewhere: FastSweep does not purge RAM, force TRIM, or benchmark your disk. It measures and explains; it does not perform theater.

Engineering for trust

Built on a verified foundation

Two editions, one binary

The App Store build is sandboxed and read-only; the Direct build adds write-capable tools. The edition is fixed at build time and shown in the app.

Signed updates

The Direct edition installs updates only from cryptographically signed manifests, verified with SHA-256 before anything runs. The App Store edition updates through the Mac App Store.

Narrow privileged helper

Direct-edition system cleanup runs through a narrow, typed helper that validates every request and supports dry-run before execution.

No account backend for scanning

Scanning and review need no account. An account exists only to manage Direct-edition licenses, and it can be deleted on request.

Give your system a fresh start.

Read-only care is free on the Mac App Store. The Direct edition adds the full write-capable toolset — cleanup, shredder, cloud cleanup, and signed updates.

macOS 11 Big Sur or later · Universal binary · No account needed to scan