1

I see the following (particularly with communications apps like slack and zoom):

enter image description here

If I had sensitive info in Downloads, say, client data for a project I'd been working on, could these applications like Zoom or Slack upload that file to their servers (or access it in any other way), or does this permission only give these applications the ability to do the following

  • save files sent through that application
  • upload files sent by the user through the application (for example, if I wanted to send a file from Downloads to a friend)

The notification as it stands doesn't rule out the possibility that the application will be given permission to upload anything it wants from Downloads to its servers at any time it wants. I would assume it doesn't have that permission, but we know what happens when we assume..

1

No: the permission is for unlimited access to that folder.

There's nothing to stop an app secretly uploading all your files to some server, except that people would notice and denounce the company, and there's no commercial benefit in doing it anyway.

The Documents folder is another location that has privileged access, but the trouble is that every app that can open and save files is likely to need access to it. If you create another user folder outside Documents, then it will be open to all user processes.

You can install something like Little Snitch, which will regularly worry you with information about all outgoing internet connections, and let you allow/deny them.

4
  • This is a short answer, but an extremely useful one. I will research Little Snitch now. If you have other contextual info please add it. Also, given the app will have complete access to the Downloads folder, I will be emptying it and moving things to some other locations, and try to develop a habit of doing so. If there are any 'best practices' (since I guess many people face the same problem), please feel free to suggest! – stevec Jul 18 '20 at 8:01
  • Most of the regulars on this forum are probably aware of this, but for anyone else, here is how to see which applications have access to which folders: support.apple.com/en-au/guide/mac-help/mchld5a35146/mac – stevec Jul 18 '20 at 8:05
  • 1
    I tend to consider Downloads a temporary storage location. But generally, I have to trust that apps aren't copying all my stuff. – benwiggy Jul 18 '20 at 8:13
  • thanks, good to know. I will do the same from now on – stevec Jul 19 '20 at 5:52

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .