Security and data handling

The short version

• No network access. The app cannot reach the internet, by design.
• No account, no sign-in, no telemetry, no analytics, no tracking.
• Your files open and save where they already live. No copy is uploaded or hidden away.
• It runs inside Apple’s App Sandbox, with only the permissions it needs to open files and print.

No network access, and how to check

Unmarked has no network entitlement. A macOS app can only do what its sandbox permits, and Unmarked’s sandbox does not include permission to use the network. That means the app cannot send your files, fetch anything, phone home, or load a remote tracker, even if it were asked to. The capability simply is not there.

You do not have to take my word for it. macOS ships with a tool that prints an app’s entitlements. Open Terminal and run:

codesign -d --entitlements :- /Applications/Unmarked.app

You will not find com.apple.security.network.client or any other network entitlement in the output, because it is not requested. The one honest consequence: a remote image linked over the internet renders as its alt text instead of downloading, because there is no network to fetch it with.

What Unmarked is allowed to touch

Its sandbox covers three things, and nothing else:

• Reading and writing the files you open or create.
• Remembering those files, so the Recent list can reopen them next time.
• Printing.

Your files stay in place

Unmarked opens a file where it already lives and saves changes back to that same file. It does not import your work into a private library, and it does not keep a shadow copy on the side. There is no data in transit, because nothing is ever in transit. If you keep your files in iCloud Drive or Dropbox, those services sync them on their own terms; that is your setup, not something Unmarked does.

What it deliberately does not do

• No analytics, telemetry, crash reporting, or third-party SDKs.
• No account system, login, or cloud sync.
• No plugins or extensions that could run code or open a network path.
• No ads, and nothing sold to anyone.

How it is distributed and updated

Unmarked is distributed through the Mac App Store, so every release is reviewed by Apple and signed, and macOS verifies it has not been tampered with before it opens. Updates arrive the same way, through the App Store. The same app is also a direct download from this site: a disk image signed with my Developer ID and notarized by Apple, with the notarization ticket stapled to it, so macOS can check it even when you are offline. Either way, the app itself never reaches out to the internet to check for or fetch an update, because it has no network access to do so.

Reporting a security issue

If you find something that looks like a security problem, please email hello@untitledapps.dev with the details and how to reproduce it. A real person reads every message; expect a reply within a few business days. Report in good faith and give me a reasonable chance to fix it, and I will not pursue any action against you for the research.

Using Unmarked at work

Compliance audits like SOC 2 and ISO 27001 check how a company protects the data it holds on its servers. Unmarked holds nothing. There is no server, no account, and no vendor database to breach. Your files never leave your Mac, so they stay inside your own company’s controls. For most security reviews, that is the answer the review is looking for.

Security or privacy? This page is how Unmarked is built to be safe. The Privacy Policy is the formal statement of what is and isn’t collected and your rights. For a plain walkthrough, see how Unmarked keeps your files private.

Last updated June 2026.