Privacy

Last updated: July 22, 2026

Everything stays on your Mac

Neodisk scans your disks and renders the results locally. Scan data, file names, and anything else the app reads never leave your machine. There are no analytics, no tracking, and no data collection of any kind.

Cloud drive scanning

Neodisk can optionally connect to your Google Drive to show what fills it. It reads your Google account email and identifier to label the connection, your storage quota, and file metadata such as names, sizes, folder structure, file types, modification dates, checksums, ownership, and shortcut details. It never reads, downloads, or modifies file contents. The scope requested (drive.metadata.readonly) is the narrowest Google offers for this.

This Google user data is used only to provide Neodisk's on-device storage visualization, search, and analysis features. It is never used for advertising, analytics, or training artificial intelligence or machine learning models.

There is no Neodisk server. Metadata retrieved from Google Drive is processed and stored only on your Mac; it is never transmitted to, stored on, or accessible from any server operated by us or anyone else, and it is never shared with, transferred to, or sold to anyone. Sign-in tokens are stored in your macOS Keychain. The scan is cached locally so it reopens quickly; it stays on your Mac until you sign out. Signing out in the app revokes access and deletes the tokens and the cached scan, and you can also revoke Neodisk anytime from your Google Account permissions page.

Neodisk's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data protection

Google sign-in and Google Drive API communications are sent directly between Neodisk and Google using HTTPS/TLS encryption. The sign-in flow uses the OAuth authorization code flow with PKCE and a unique state value to protect against interception and request forgery. OAuth tokens are stored in the macOS Keychain and are never written to the scan cache.

Google Drive metadata is cached only in Neodisk's private, per-user Application Support directory. It is protected by macOS user-account access controls and by disk encryption such as FileVault when enabled. Neodisk uses an ephemeral network session with cookie storage and HTTP disk caching disabled. Google user data is never sent to a Neodisk server or any other third-party server.

Update checks

The app periodically checks this site for new versions (a standard web request that fetches the update feed). The request carries no personal information and nothing about your disks. Updates download from GitHub.

Contact

Questions? Open an issue on GitHub.