Review-first by default
Every finding arrives with a reason, a size, and a proposed behavior. Nothing — not even confidently-safe cache files — is removed until you approve the review list.
Security & privacy
FastSweep is built so the dangerous default is impossible. Here's exactly how your files and privacy are protected — including what the app deliberately does not do.
Every finding arrives with a reason, a size, and a proposed behavior. Nothing — not even confidently-safe cache files — is removed until you approve the review list.
Cleaned files move to the Trash so you can recover them before emptying it. The only permanent path is the Shredder, and it demands an explicit per-file confirmation.
Scans run entirely on your Mac. You can scan and review without an account, and file contents are never uploaded as part of scanning.
Prompt histories, workspace state, vector data, and other personal context are classified high-risk: surfaced for review only, never auto-selected.
A local audit log records each action with the item, path, size, behavior, and result, so you always have a record of exactly what FastSweep did.
Camera, microphone, screen recording, contacts, location, and other sensitive grants are surfaced for review in the native system privacy panes.
Realtime protection, honestly
Many cleaners advertise “kernel-level blocking.” FastSweep does not have it and will not pretend to. What it has is a user-space FSEvents file-event watch that alerts you the moment a known signature appears — and then waits for your decision.
The realtime monitor subscribes to macOS FSEvents file events and matches them against the local signature database. It runs as an ordinary user-space process.
A match becomes a detection record with a proposed quarantine action. FastSweep has no kernel extension and no kernel-level blocking, and it never claims otherwise.
Detection records carry no autonomous filesystem action: nothing is moved, quarantined, or deleted until you confirm through the standard review and quarantine flow.
The same honesty applies elsewhere: FastSweep does not purge RAM, force TRIM, or benchmark your disk. It measures and explains; it does not perform theater.
Engineering for trust
The App Store build is sandboxed and read-only; the Direct build adds write-capable tools. The edition is fixed at build time and shown in the app.
The Direct edition installs updates only from cryptographically signed manifests, verified with SHA-256 before anything runs. The App Store edition updates through the Mac App Store.
Direct-edition system cleanup runs through a narrow, typed helper that validates every request and supports dry-run before execution.
Scanning and review need no account. An account exists only to manage Direct-edition licenses, and it can be deleted on request.
Read-only care is free on the Mac App Store. The Direct edition adds the full write-capable toolset — cleanup, shredder, cloud cleanup, and signed updates.
macOS 11 Big Sur or later · Universal binary · No account needed to scan