Are Mac notch apps safe?
Notch apps are ordinary Mac apps, so they carry ordinary risks and the same checks apply. No notch app is safe or unsafe because of the notch. What matters is who made it, how it is distributed, what permissions it asks for and what it sends over the network.
The short checklist
- Source. Download from the developer’s site or a store you trust. Look for a named maker and a privacy page.
- Notarization. Apple notarizes apps it has scanned for known malware. Run
spctl --assess --verbose /Applications/AppName.appin Terminal. Some free and open source apps are not notarized, and that is a choice to make knowingly. - Permissions. A notch app might reasonably ask for Calendars or Reminders, Camera for a mirror, or Automation to control a music player. Ask why when you see Accessibility or full disk access.
- Account. A tool that only runs on your Mac should not need a sign in. Ask why if it does.
- Network. Find out what it sends and when. A network monitor shows the connections.
Our privacy checklist for notch apps goes through all seven checks with commands.
See what an app can reach
Open System Settings, click Privacy and Security and look through the lists, for example Camera. Apple says the camera list shows apps you installed that have asked to use the camera. A green light beside the camera glows when it is on.
Why the notch makes people ask
The camera is in the notch, so people connect the two. The cutout is only the place where an app draws its panel. It does not give an app access to the camera. See does the notch have a camera.
What to do if something looks off
Quit the app, remove its permissions in Privacy and Security, delete it and download it again from the official site. If it behaved oddly, tell the developer and check the network connections with a monitor.
NotchStar
NotchStar is signed with an Apple Developer ID and notarized, needs no account and sends nothing by default. The safety page lists every permission and how to check the download. Its Mirror tool is the only part that uses the camera, and only while the tab is open.