# Is Boring Notch safe? What its README states

> Is Boring Notch safe? Its README says it is unsigned, GPL 3.0 and free, and states no permissions or data policy. What to check yourself, with sources.

Canonical: https://www.notchstar.com/best/is-boring-notch-safe/
Last updated: 2026-11-05

Published 2026-11-05.

This page answers "is Boring Notch safe" by listing what the project's own pages say, and what they leave out. This page does not rate the app. Its README, read on 5 November 2026, says it is free, has no Apple Developer account yet, and needs a workaround to open the first time. It states no permissions and no data policy. The source is public under GPL 3.0, so you can check the rest yourself.

## What the README says

The table below only repeats what the project's GitHub page and README state. "Not stated" means the page does not say, which is different from "no".

| Question | What its pages state |
|---|---|
| Who makes it | The repository belongs to the TheBoredTeam organization on GitHub. The README names no individual maintainer. It credits others for the icon and the website. |
| Open or closed source | The repository page lists the GPL 3.0 license. The README body does not set out the terms. |
| Price | Not stated as a price. The README links a Ko fi page for voluntary support. |
| Signed by a Developer ID | The README says the project has no Apple Developer account yet. It does not mention signing. |
| Notarized by Apple | Not stated. |
| Permissions it needs | Not stated. |
| Data it collects | Not stated. No privacy policy is linked from the README. |
| Refunds | Not applicable to a free download, and not stated. |
| macOS needed | macOS 14 Sonoma or later, on Apple silicon or Intel. |

The project's website, theboring.name, showed only a title line when read on 5 November 2026, so it adds nothing to this table.

## How you open it the first time

Because the README says there is no Apple Developer account, macOS shows an unidentified developer warning. The README gives three ways round it:

1. A Terminal command, `xattr -dr com.apple.quarantine "/Applications/Boring Notch.app"`, which the README recommends and says works for all users.
2. Open the app, click OK on the warning, then use Open Anyway in System Settings under Privacy & Security. The README says this does not work for all users.
3. Install with Homebrew using `brew install --cask TheBoredTeam/boring-notch/boring-notch`. The README says this avoids the warning.

Apple has its own advice on this. Its page on opening an app from an unidentified developer says apps that Apple has not reviewed trigger the warning, and that overriding security settings is a common way Macs get infected with malware. It says the safest options are the Mac App Store or an alternative app. That is Apple's general advice, not a statement about Boring Notch. Whether to proceed is your call, and the checks below help you decide.

## What the open source license gives you

A public repository means anyone can read what the app does. The README credits two outside projects, MediaRemoteAdapter for Now Playing and NotchDrop for the original shelf, so part of the code is built on other open projects. The release notes on GitHub mention fixes to update signing and updater security in some versions. They do not mention notarization or telemetry. The pages state nothing either way about whether anyone has audited the code, so do not assume it.

A closed source app such as NotchStar gives you no source to read. The trade is a signed and notarized download from one developer. Open source can be checked by people with the skills, but a build you download is a separate thing from the source on GitHub. You can build it yourself from the repository if you want to be sure what you run.

## Checks you can run yourself

1. **Ask macOS what it thinks of the app.** After installing, run `spctl -a -vv "/Applications/Boring Notch.app"` in Terminal. The answer is `accepted` or `rejected`, with a source such as Notarized Developer ID. The README says there is no developer account, so a rejection would match what the README says. The project may change this, so run the check on your copy. The result describes how macOS views the download, not whether the code is harmful.
2. **Read the permission list in System Settings.** Open Apple menu, System Settings, Privacy & Security. Each category lists the apps that asked for access, and you can turn off any you do not want. Apple's page for this describes macOS 27 (checked 5 November 2026). Labels can differ on older versions of macOS.
3. **Watch the network.** Because no privacy page exists, use a network monitor such as Little Snitch to see which servers the app contacts. If it contacts none, that is easy to confirm. If it does, you can look the address up.
4. **Read the code or the issues.** Search the repository for network calls, or read the open and closed issues for reports about privacy.
5. **Verify where the download came from.** Use the project's GitHub releases page or the Homebrew command in its README, not a copy from a third party site.

## What this means for a buyer

Boring Notch costs nothing, so there is no payment, license key or account to consider. The open questions are the ones its pages leave blank: permissions, data and signing. If you want a free app and are comfortable with a Terminal command or Homebrew, the README gives you that route. If you would rather double click a notarized app, pick one that states it. If you are unsure, [the notch app privacy checklist](https://www.notchstar.com/guides/notch-app-privacy-checklist/) lists the questions to ask of any app, and [Are Mac notch apps safe](https://www.notchstar.com/tips/are-notch-apps-safe/) covers the basics.

## How NotchStar compares

NotchStar is closed source. Downloads since version 1.0.3 are signed with a Developer ID and notarized by Apple, there is no account, and nothing is measured unless you say yes to anonymous version info. It asks for four permissions: Calendars, Reminders, Camera and Automation. It costs $4 once with a 7 day trial and a 7 day refund. Prices as of 5 November 2026. Boring Notch wins on price and on readable source, and it replaces the system volume and brightness pop ups, which NotchStar does not. Read the [full comparison](https://www.notchstar.com/vs/boring-notch/) or the [Boring Notch alternatives page](https://www.notchstar.com/alternatives/boring-notch/). The details are in [Is NotchStar safe](https://www.notchstar.com/guides/is-notchstar-safe/).

## Sources

All pages were read on 5 November 2026.

- [Boring Notch on GitHub](https://github.com/TheBoredTeam/boring.notch)
- [Boring Notch README](https://raw.githubusercontent.com/TheBoredTeam/boring.notch/main/README.md)
- [Boring Notch releases](https://github.com/TheBoredTeam/boring.notch/releases)
- [Boring Notch website](https://theboring.name)
- [Apple, open a Mac app from an unidentified developer](https://support.apple.com/guide/mac-help/open-a-mac-app-from-an-unidentified-developer-mh40616/mac)
- [Apple, Gatekeeper and notarization](https://support.apple.com/en-us/102445)
- [Apple, change Privacy & Security settings](https://support.apple.com/guide/mac-help/change-privacy-security-settings-on-mac-mchl211c911f/mac)
- [NotchStar privacy page](https://www.notchstar.com/privacy/)

## Quick answers.

### Is Boring Notch signed or notarized by Apple?

Its README says the project does not have an Apple Developer account yet, and that macOS warns about an unidentified developer on first launch. It does not mention signing or notarization. Read the README on GitHub for its current wording.

### Is Boring Notch open source?

The GitHub page for the project lists the GPL 3.0 license, so you can read the source. The README itself does not state the license terms.

### Does Boring Notch collect data?

Its README does not state what data it collects, if any, and it does not say which permissions it needs. Because the code is public, you can read it or ask the project on its Discord.

## Keep reading.

- [Is NotchStar safe? Signing, permissions and what it sends](https://www.notchstar.com/guides/is-notchstar-safe/): NotchStar is signed and notarized by Apple, needs no account and sends nothing unless you opt in. See every permission it asks for and how to check it yourself.
- [A privacy checklist for any Mac notch app](https://www.notchstar.com/guides/notch-app-privacy-checklist/): Seven checks to make before you install a notch app: permissions, notarization, network use, data storage and what to do if something looks off.
- [Are Mac notch apps safe?](https://www.notchstar.com/tips/are-notch-apps-safe/): Notch apps are ordinary Mac apps with ordinary risks. What to check before installing one: source, notarization, permissions, network use and account needs.
- [NotchStar vs Boring Notch](https://www.notchstar.com/vs/boring-notch/): An evidence based comparison of NotchStar and Boring Notch, the free GPL 3.0 notch app: price, signing, HUDs, release history, features and who each one suits.
- [Boring Notch alternatives](https://www.notchstar.com/alternatives/boring-notch/): An evidence based comparison of NotchStar and Boring Notch, the free GPL 3.0 notch app: price, signing, HUDs, release history, features and who each one suits.

## More in Safety.

- [The safest Mac notch apps: what each one states about itself](https://www.notchstar.com/best/safest-mac-notch-apps/): Ten Mac notch apps compared on what their own pages state: open or closed source, signing, accounts, data collected and permissions. Checked 5 November 2026.
- [Mac notch apps that collect no data: what each one states](https://www.notchstar.com/best/mac-notch-apps-that-collect-no-data/): Which Mac notch apps state on their own pages that they collect no data, which state analytics, and which say nothing. Read from each app on 5 November 2026.
- [Is NotchNook safe? What its pages state](https://www.notchstar.com/best/is-notchnook-safe/): Is NotchNook safe? Its terms say it is Developer ID signed and notarized, closed, paid and licensed per Mac. See its privacy page, permissions and refund terms.
- [Is Droppy safe? Its permissions, privacy page and signing](https://www.notchstar.com/best/is-droppy-safe/): Is the Droppy notch app safe? Its docs say it is signed and notarized and list eleven permissions. Read what its privacy page states and how to check it.
- [What permissions Mac notch apps ask for, and how to review them](https://www.notchstar.com/best/what-permissions-mac-notch-apps-ask-for/): Which macOS permissions Mac notch apps say they need, from Accessibility to Camera, what each allows, and how to review or revoke them. Read 5 November 2026.