How to Control App Permissions on Mac (2026)

App permissions on Mac determine which applications can access sensitive hardware and data — your camera, microphone, location, contacts, photos, and more. Unlike iOS, where permission prompts are front-and-center, macOS places these controls in System Settings, which means many users don't realize apps have been granted access until they review the settings manually.

Understanding and managing these permissions is critical for privacy. A poorly-designed or malicious app with camera access can record you without obvious indication. An app with contacts access can upload your entire address book to a remote server. This guide walks through every permission type available in macOS and shows you exactly how to audit and control what your apps can do.

Table of Contents

• Quick Permission Summary Table
• Why App Permissions Matter on Mac
• How to Access Privacy & Security Settings
• Camera Permissions
• Microphone Permissions
• Location Services
• Contacts, Calendars, and Reminders
• Photos and Files & Folders Access
• Accessibility Permissions
• Screen Recording and Automation
• How to Revoke App Permissions
• FAQ
• Conclusion

Quick Permission Summary Table

Why App Permissions Matter on Mac

macOS uses a permission system called Transparency, Consent, and Control (TCC) that requires apps to request explicit permission before accessing sensitive data or hardware. When an app needs access for the first time, macOS shows a system prompt asking you to allow or deny. Your choice is stored in a protected database that you can view and modify via System Settings.

Here's why this matters:

• Camera and microphone access can be abused. Apps with these permissions can record you without your knowledge. While macOS shows an orange indicator dot in the menu bar when the camera or mic is active, a background process or minimized app can still capture audio/video.

• Location data is sensitive. Apps that track your location can build a detailed profile of your movements, routines, and habits. This data is valuable to advertisers and can be a privacy risk if leaked or sold.

• Contacts and calendar data are personal. Granting access to your contacts means an app can read, store, or upload your entire address book — including names, phone numbers, email addresses, and physical addresses of everyone you know.

• Accessibility and screen recording are powerful. Accessibility permissions let apps see and control everything you do on your Mac — every keystroke, every password field, every window. It's the highest level of trust you can grant.

Common permission risks:

• Over-permissioned apps. Many apps request permissions they don't strictly need. A simple text editor has no legitimate reason to access your camera or microphone.
• Abandoned or outdated apps. Apps you installed years ago and no longer use may still have active permissions to sensitive data.
• Malware and adware. Malicious software often requests permissions under false pretenses — for example, a "system cleaner" that requests accessibility access to inject ads or monitor your activity.

How to Access Privacy & Security Settings

All app permission controls are centralized in System Settings > Privacy & Security on macOS Sonoma and later (or System Preferences > Security & Privacy > Privacy on older versions).

Step 1: Click the Apple menu () in the top-left corner of your screen.

Step 2: Select System Settings.

Step 3: In the left sidebar, click Privacy & Security.

Step 4: Scroll down to the Privacy section. You'll see a list of permission categories (Camera, Microphone, Location Services, etc.).

Step 5: Click any category to view which apps have requested or been granted access.

Tip: On macOS Ventura and later, the Privacy & Security pane is a single vertical list. On older macOS versions (Big Sur, Monterey), Privacy settings are under a separate Privacy tab after clicking Security & Privacy.

Camera Permissions

Camera permissions control which apps can access your Mac's built-in FaceTime camera or any connected external camera.

How to review and manage:

Step 1: Go to System Settings > Privacy & Security > Camera.

Step 2: You'll see a list of all apps that have requested camera access. Each app has a toggle switch next to its name.

Step 3: Toggle off any app you don't want to have camera access. The app will be immediately blocked from using the camera.

Step 4: If you toggle off an app that's currently using the camera, macOS will force-quit the app's camera session.

Indicators:

• When an app is actively using the camera, a green light appears next to the camera lens on MacBooks with a physical indicator.
• On Macs running macOS Ventura or later, an orange dot appears in the menu bar when the camera is in use.

Common camera-using apps you should see here:

• Zoom, Teams, Skype, FaceTime (video conferencing)
• Photo Booth, QuickTime Player (video recording)
• OBS Studio, Ecamm Live (streaming software)

Red flag: If you see apps here that you don't recognize or that have no business using a camera (e.g., a text editor, a file manager), investigate before granting permission.

Microphone Permissions

Microphone permissions control audio recording. Any app that wants to capture sound from your built-in mic, external mic, or line-in must request permission.

How to review and manage:

Step 1: Go to System Settings > Privacy & Security > Microphone.

Step 2: Review the list of apps. Toggle off any app you don't trust or that doesn't need mic access.

Step 3: Note that browsers (Safari, Chrome, Firefox) may appear here if you've used web apps that request mic access (e.g., Google Meet, Discord web). Disabling the browser blocks mic access for all web apps in that browser.

Indicators:

• On macOS Ventura and later, an orange dot in the menu bar appears when the mic is active.

Common mic-using apps:

• Zoom, Teams, Discord (communication)
• GarageBand, Logic Pro, Audacity (audio recording/editing)
• Dictation-enabled apps (if you use macOS Dictation feature)

Tip: If you want to use Dictation (the built-in speech-to-text feature), the app you're dictating into must have microphone permission enabled.

Location Services

Location Services allow apps to determine your Mac's physical location using Wi-Fi network data and IP geolocation (Macs don't have GPS unless you're using a cellular iPad or iPhone with Continuity features).

How to review and manage:

Step 1: Go to System Settings > Privacy & Security > Location Services.

Step 2: At the top, you'll see a toggle to enable or disable Location Services entirely. If this is off, no app can access location data.

Step 3: Below that, scroll through the list of apps. Each app has one of three settings:

• Never — app is blocked from location access
• While Using the App — app can access location only when active
• Always — app can access location even when running in the background

Step 4: Set each app to the minimum level it needs. Most apps only need "While Using" if they need location at all.

System services:

Click System Services at the bottom to see which macOS features use location:

• Find My — requires location to show your Mac on the Find My network
• Time Zone — sets your time zone automatically based on location
• Safari & Spotlight Suggestions — uses location to provide local search results

You can toggle these off individually if you don't use them.

Tip: "Significant Locations" (under System Services) stores a history of frequently visited locations to improve features like Maps and Calendar suggestions. You can view and clear this history, or disable it entirely for maximum privacy.

Contacts, Calendars, and Reminders

These permissions control access to your personal information databases managed by macOS.

How to review:

Step 1: Go to System Settings > Privacy & Security > Contacts (or Calendars, or Reminders).

Step 2: Review which apps have access. Common legitimate examples:

• Mail — needs Contacts to autocomplete email addresses
• Calendar — syncs with Calendars database
• Reminders — syncs with Reminders database
• Third-party email clients (Spark, Airmail) — need Contacts for autocomplete

Step 3: Toggle off any app that doesn't need this data.

Why it matters:

Granting Contacts permission gives an app full read access to every contact in your address book — including names, phone numbers, emails, addresses, notes, and photos. Apps can upload this data to remote servers, use it for marketing, or sell it to data brokers. Only grant access to apps you fully trust.

Photos and Files & Folders Access

Photos:

Step 1: Go to System Settings > Privacy & Security > Photos.

Step 2: Review which apps can access your Photos library. Common examples: photo editing apps (Pixelmator, Affinity Photo), cloud backup tools (Google Photos, Dropbox).

Step 3: Apps with "Add Photos Only" permission can save new images to your library but can't read existing photos. Apps with full access can view, edit, and delete all photos.

Files & Folders:

macOS restricts access to specific user folders (Desktop, Documents, Downloads, iCloud Drive, Removable Volumes, Network Volumes).

Step 1: Go to System Settings > Privacy & Security > Files and Folders.

Step 2: Expand each app to see which folders it has access to.

Step 3: Toggle off access to folders the app doesn't need.

Important: Unlike iOS, macOS apps can access many system folders by default. The Files & Folders permission system only covers the protected user folders listed above. Apps can freely access other locations unless you use third-party tools or manual permission controls.

Accessibility Permissions

Accessibility permissions grant apps the ability to monitor and control your Mac system-wide — including reading keystrokes, clicking buttons in other apps, and viewing screen contents of all apps.

This is the most sensitive permission on macOS.

How to review:

Step 1: Go to System Settings > Privacy & Security > Accessibility.

Step 2: Review the list carefully. Apps that legitimately need this permission:

• Clipboard managers (Alfred, Paste)
• Window managers (Rectangle, Magnet)
• Automation tools (Keyboard Maestro, BetterTouchTool)
• Screen readers (VoiceOver if you manually enabled third-party tools)

Step 3: Remove any app you don't actively use or trust.

Warning: Malware and adware frequently request Accessibility permission under false pretenses (e.g., "to improve performance" or "to clean your system"). Never grant this permission to an app unless you're certain it's legitimate and you understand why it needs this access.

To remove Accessibility permission:

Toggle the app off, or click the – button to remove it from the list entirely. You'll be prompted to re-grant permission if the app requests it again.

Screen Recording and Automation

Screen Recording:

Apps that can capture your screen contents — including sensitive information like passwords, bank accounts, or private messages — must request Screen Recording permission.

Step 1: Go to System Settings > Privacy & Security > Screen Recording.

Step 2: Review the list. Legitimate examples:

• Screen capture tools (CleanShot X, ScreenFlow)
• Video conferencing (Zoom, Teams when screen-sharing)
• Remote desktop apps (TeamViewer, AnyDesk)

Step 3: Revoke access for apps you don't actively use for screen recording.

Automation:

Automation permissions let apps control other apps via AppleScript or Shortcuts.

Step 1: Go to System Settings > Privacy & Security > Automation.

Step 2: Each app is listed with sub-items showing which other apps it can control.

Example: Alfred can control Finder, System Events, and Terminal to run automation scripts.

Step 3: Toggle off any automation relationship that seems unnecessary or suspicious.

How to Revoke App Permissions

Revoking a permission is instant and doesn't require restarting your Mac.

Method 1: Via System Settings

Step 1: Navigate to the specific permission category (e.g., Camera, Microphone).

Step 2: Toggle the app off.

Step 3: The app loses access immediately. If it tries to use that resource again, it will either fail silently or prompt you to re-enable permission.

Method 2: Remove the App Entirely from the List

Step 1: In the permission category, select the app.

Step 2: Click the – button (minus sign) to remove it from the list.

Step 3: The app will need to request permission again the next time it needs that resource.

Method 3: Reset All Permissions for an App

If you want to fully reset an app's permissions (force it to re-request everything):

Step 1: Quit the app completely.

Step 2: Open Terminal.

Step 3: Run:

tccutil reset All com.example.appname

Replace com.example.appname with the app's bundle identifier. You can find this by right-clicking the app in Finder, choosing Show Package Contents, and opening Contents/Info.plist.

FAQ

Can I see which apps have accessed my camera or mic recently?

macOS doesn't provide a built-in log of permission usage. However, the orange/green indicator dots in the menu bar (macOS Ventura and later) alert you in real-time when the camera or mic is active. Third-party apps like OverSight can log and alert you to camera/mic access events.

What happens if I deny permission when an app asks?

The app's feature that needs that permission will fail. For example, if you deny camera access to Zoom, you can join meetings but won't be able to share video. Most apps will show an error message or a prompt directing you to System Settings to enable the permission manually.

Can apps bypass macOS permissions?

Apps distributed through the Mac App Store are sandboxed and cannot bypass the permission system. Apps downloaded directly from the web and notarized by Apple are also subject to these restrictions. However, unsigned or maliciously crafted apps may attempt to exploit system vulnerabilities. Keeping macOS up to date is the best defense.

Why does my browser appear in multiple permission categories?

Browsers act as a platform for web apps. When you use a website that requests mic or camera access (e.g., Google Meet, Zoom web client), the browser itself requests that permission from macOS on behalf of the web app. Denying browser permission blocks all web apps in that browser.

How do I audit permissions for all apps at once?

There's no single "show all permissions" view in macOS. You must check each permission category individually. Third-party tools like Privacy Indicator and LuLu can help monitor and alert you to permission usage across apps.

Conclusion

Controlling app permissions on your Mac is one of the most effective ways to protect your privacy and limit the potential damage from malicious or poorly-designed software. Start by reviewing the high-risk categories — Camera, Microphone, Accessibility, Screen Recording — and remove access for any app you don't actively use or fully trust.

Make it a habit to audit your permissions every few months, especially after installing new software or macOS updates. Remember that granting permission is easy, but understanding what an app does with that access requires trust and transparency from the developer.