Safety model
Power tools, with the brakes left on.
Scan before anything changes
Every destructive tool starts as a read-only inventory. You see exact paths, sizes, and the reason each item was flagged before any action is offered.
Trash is the default
Reviewed items move to the Trash, and Cleanup keeps a private restore history that survives restarts. Permanent removal is a separate action with its own confirmation.
Checked again at the last second
Right before an action runs, paths and file identities are verified again. If something changed since the review, the action stops instead of guessing.
Active things are protected
Running apps, their helpers, open files, active projects, and system locations are excluded rather than cleaned around.
Read-only hardware access
Battery, thermal, and display modules only read. Charge limits, fan control, and monitor writes stay off until they are proven safe and explicitly enabled.
Unsupported is a normal answer
No battery, no fans, no permission, or an unreadable folder is reported plainly. The app never fakes a value or asks you to disable system protections.
Every destructive action
Five steps, never skipped.
- 1
Scan
A read-only inventory. Nothing is selected for you that the app cannot explain.
- 2
Review
Exact paths, sizes, and reasons, with a dry run of what the action would do.
- 3
Confirm
You choose the items. Permanent removal needs a second, explicit acknowledgment.
- 4
Re-check
Paths and file identities are verified again immediately before the action runs.
- 5
Recover
Trash moves are recorded privately so they can be reviewed and restored later.
Review before moving to Trash
3 of 4 items selected · dry run complete
- 6.2 GB
~/Library/Developer/Xcode/DerivedData/Atlas-bxk…
Build output
- 1.4 GB
~/Library/Caches/com.example.editor
App cache · app closed
- 812 MB
~/Projects/site/node_modules
Dependencies · reinstallable
- 640 MB
~/Downloads/Installer-2024.dmg
Disk image · not mounted
Paths and identities are checked again
right before anything moves.
Permissions
Asked for only when a feature needs it.
- AccessibilityWindows; AI Chat selected-text capture and pasteback; clearing recent items in Cleanup › PrivacyThose features explain what is missing and how to grant it. Everything else keeps working.
- Full Disk AccessOptional. Lets Cleanup read protected locations such as Mail data and some browser folders.Scans finish and list the locations they could not read, instead of silently skipping them.
- Administrator approvalCleanup maintenance tasks that need a privileged helper. Requires a Developer ID–signed build and your approval in System Settings.The helper is never registered and those tasks stay unavailable.
- NotificationsBattery charge alerts, only when you turn them on.Alerts stay off. Updates never use notifications.
- Launch at loginOptional setting so the menu bar items and Command Center shortcut are ready after you log in.Open the app yourself when you need it.
Battery, System, Displays, Thermals, and Menu Bar need no permissions at all. MacUtilityHub never asks you to disable System Integrity Protection or Gatekeeper.
Private beta
Help shape a calmer way to look after your Mac.
A small group of testers is using MacUtilityHub before its public release. See what the beta includes and what it needs to run.