Privacy Policy
Short version: FinderPilot does not make network calls, does not collect analytics, and does not phone home. Everything you do in the app stays on your Mac. The longer version is below.
1. What data FinderPilot stores on your Mac
FinderPilot stores a small amount of data inside macOS's per-app sandbox container, specifically the App Group at group.com.finderpilot:
- Settings — your toggles, favorites, custom templates, and granted-folder bookmarks. Stored as
settings.json. - Security-scoped bookmarks — when you grant access to a folder via the standard macOS file picker, macOS gives FinderPilot a sandbox-only token that lets it touch that folder. Tokens are stored alongside settings.
- Local logs — rolling 7-day file logs at
group.com.finderpilot/Logs/. Path redaction is on by default — usernames, emails, and IPs in log lines are replaced with<name>,<email>,<ip>placeholders before being written. - Recent paths — an LRU cache of up to 20 folders the menu-bar dropdown surfaces. Only path strings; no file contents.
2. What FinderPilot never does
- FinderPilot has no network entitlements. The host app and the Finder Sync extension cannot make outbound HTTP, DNS, or any other network call. macOS enforces this at the sandbox level.
- No analytics SDK. No telemetry, no event pipeline, no error reporter that talks to a server.
- No background daemons. FinderPilot runs as a regular sandboxed app plus a Finder Sync extension that macOS hosts.
- No access to folders or files you have not explicitly granted via the system file picker.
- No clipboard reads. FinderPilot only writes to the clipboard when you ask it to (e.g. Copy Path).
3. Diagnostics exports
If you run into a problem and want to share logs with us, you can export a diagnostics zip from Settings → Diagnostics → Export. The zip is written to your Documents folder. Nothing is sent automatically — sharing it with us is your choice and your action.
The zip never includes file contents. By default it includes redacted log lines and your settings.json with bookmark blobs stripped. You can review it before sharing.
4. Third parties
FinderPilot has no third-party SDKs and no third-party services. The only entity we share data with is no one.
Distribution is via the Mac App Store. Apple's standard App Store privacy applies to the purchase, the receipt, and any App Store ratings or reviews you write — none of which FinderPilot reads or sees. See Apple's Privacy Policy.
5. Children
FinderPilot is a developer tool intended for users 13 and older. We do not knowingly collect data from children — we do not collect data from anyone — but the App Store enforces its own age and regional gating.
6. Your rights
Under GDPR, CCPA, and equivalent regimes, you have the right to access, correct, delete, and export the personal data a controller holds about you. FinderPilot does not act as a controller for any personal data because we do not collect any. If you want to delete the local data FinderPilot stores on your Mac, drag FinderPilot to the Trash and empty the group.com.finderpilot container in ~/Library/Group Containers/.
7. Changes to this policy
We will post any changes to this page and update the "Last updated" date at the top. Material changes will be flagged in the app's Welcome / What's New page on the next release.
8. Contact
Privacy questions: privacy@finderpilot.app
General support: support@finderpilot.app