Wait, what?

We always trusted you, OS X.

I created this site after becoming frustrated with the fragmentation of all of the information around all of the new Yostemite privacy issues. I aim to collect all concerns and solutions here.

I hope this guide serves you well and saves you some time.

Fork me on GitHub


Spotlight sends search and location information to Apple 3rd parties


Spotlight is the OS X’s search feature. “When you use Spotlight, your search queries, the Spotlight Suggestions you select, and related usage data will be sent to Apple,” Apple’s “About Spotlight & Privacy” document states. “If you have Location Services on your device turned on, when you make a search query to Spotlight the location of your device at that time will be sent to Apple.”


From our friends over at fix-macosx!

You must update preferences in TWO location in System Preferences:

  • Disable “Spotlight Suggestions” and “Bing Web Searches” in System Preferences > Spotlight > Search Results.

  • Safari also has a “Spotlight Suggestions” setting that is separate from Spotlight’s “Spotlight Suggestions”. This uses the same mechanism as Spotlight, and if left enabled, Safari will send a copy of all search queries to Apple.

Alternatively, you can download this automated script from fix-macosx!

Make sense? Didn’t think so!


iCloud unsaved document uploads


Without any obvious notification to the user, Yosemite will now upload your unsaved content within Apple apps to iCloud. iCloud document storage has been around for a while, but Yosemite is the first release to implement storage of unsaved documents. The result is data which you might not even intend to save ending up on Apple (and whatever government entities might be overlooking) servers without your knowledge whatsoever.


 → System Preferences → iCloud → uncheck Documents & Data).


Currently, there is no known way to avoid syncing unsaved files without disabling all iCloud document functionality.

System Info

System Information (About this Mac)


As pointed out by fix-osx once again, when we visit “ → About this Mac”, Yosemite calls home to Apple with the following #sesssion idenfied# and #plain text# request:

GET /sp/product?edid=10.10&lang=en_US HTTP/1.1
Host: support-sp.apple.com
Accept: */*
Cookie: s_fid=7A91854B9C94B6A0-1581381A15C2A650; s_invisit_n2_us=3; s_pathLength=homepage%3D1%2C; s_ppv=apple%2520-%2520index%2Ftab%2520%2528us%2529%2C100%2C100%2C643%2C; s_vi=[CS]v1|2A22088205011E8F-6000010A6000B2B6[CE]; s_vnum_n2_us=3%7C1
User-Agent: System%20Information/915 CFNetwork/720.0.9 Darwin/14.0.0 (x86_64)
Accept-Language: en-us
Accept-Encoding: gzip, deflate
Connection: keep-alive

HTTP/1.1 200 OK
Server: Apache/2.2.26 (Unix)
Content-Length: 133
Cneonction: close
Content-Type: text/plain
Date: Sun, 19 Oct 2014 19:29:57 GMT
Connection: keep-alive

<?xml version="1.0" encoding="utf-8" ?><root><name>CPU Name</name><configCode>OS X Yosemite</configCode><locale>en_US</locale></root>


Hold on ..


Mail.app sending information about private accounts to Apple.