macOS Tahoe
What the default settings do
macOS Tahoe (macOS 26), released in September 2025, brought a visual overhaul to System Settings (the “Liquid Glass” redesign) but kept most privacy defaults from Sequoia in place: Gatekeeper restricts unsigned apps, XProtect scans for malware, and apps must request permission for camera, microphone, and file access. Safari’s advanced tracking and fingerprinting protections now apply across all browsing by default, not just Private Browsing.
Several defaults still share data with Apple or leave collection enabled. Analytics and diagnostics are sent unless you opt out, Siri and Spotlight index data from your apps, personalized ads are on in Apple apps, and Location Services are enabled broadly. One default improved: FileVault is now turned on automatically when you set up a Mac with an Apple ID, with its recovery key stored in the end-to-end encrypted Passwords app rather than plain iCloud. The built-in Firewall remains off by default.
A reasonable privacy baseline
These settings are found in System Settings on your Mac.
Analytics & Improvements
System Settings → Privacy & Security → Analytics & Improvements → Share Mac Analytics → Off
Stops sending daily diagnostics and usage data to Apple, including hardware configuration, OS performance, and app usage patterns.
System Settings → Privacy & Security → Analytics & Improvements → Improve Siri & Dictation → Off
Prevents audio recordings and transcripts of Siri interactions from being stored by Apple for quality review.
System Settings → Privacy & Security → Analytics & Improvements → Share with App Developers → Off
Stops sending crash data and usage statistics from third-party apps to their developers through Apple.
Apple Intelligence & Siri
System Settings → Apple Intelligence & Siri → Delete Siri & Dictation History → Delete
Removes any Siri interaction data currently stored on Apple's servers. This is a one-time action rather than a toggle.
System Settings → Apple Intelligence & Siri → Siri Suggestions & Privacy → per-app "Learn from this Application" toggles → Review and disable for apps you consider sensitive
Siri and Spotlight index content from apps to power suggestions and search. You may want to disable this for apps that contain sensitive information, such as password managers, banking apps, or personal journals.
Location Services
System Settings → Privacy & Security → Location Services → On (but review per-app access)
Keeping Location Services on is practical for maps and weather. The important step is reviewing which apps have access.
System Settings → Privacy & Security → Location Services → System Services → Details → Turn off Significant Locations
Stops your Mac from logging places you visit frequently. This data is encrypted and stored on-device, but you may prefer not to collect it.
System Settings → Privacy & Security → Location Services → System Services → Details → Turn off Mac Analytics
Prevents location data from being included in analytics reports sent to Apple.
Per-app location access → Review and set to "Ask Next Time" or disable for apps that do not need it
Scroll through the list of apps under Location Services and remove access for any app that does not have a clear reason to know your location.
Apple Advertising
System Settings → Privacy & Security → Apple Advertising → Personalized Ads → Off
Apple shows ads in the App Store, Apple News, and Stocks. Turning this off means those ads are not based on your interests, search behavior, or app downloads.
FileVault
System Settings → Privacy & Security → FileVault → On (on by default when set up with an Apple ID)
FileVault encrypts your entire startup disk. In Tahoe it is enabled automatically during Apple ID setup, with its recovery key stored via end-to-end encrypted iCloud Keychain in the Passwords app rather than plain iCloud. Verify it is on; if not, enabling it encrypts the disk in the background without noticeable performance impact.
Firewall
System Settings → Network → Firewall → On
The macOS firewall is off by default. Turning it on blocks unsolicited incoming connections. This is a straightforward security improvement, particularly if you connect to public Wi-Fi networks. It does not affect outgoing connections or normal browsing.
Safari
Safari → Settings → Privacy → Prevent cross-site tracking → On (on by default)
Blocks third-party cookies and cross-site tracking using Intelligent Tracking Prevention.
Safari → Settings → Privacy → Hide IP address from trackers → Trackers Only (or Trackers and Websites with iCloud+)
Hides your IP address from known tracking domains. With an iCloud+ subscription, the broader option uses Private Relay. Otherwise it relies on local processing.
Safari → Settings → Advanced → Privacy Preserving Ad Measurement → Off
This feature lets websites measure ad effectiveness without identifying you personally. Turning it off prevents any ad attribution data from being shared.
Safari → Settings → Advanced Tracking and Fingerprinting Protection → On (on by default in all browsing as of Tahoe)
Previously limited to Private Browsing windows, this protection now extends to all of Safari by default starting with Tahoe, making it harder for sites to fingerprint your Mac. Leaving this at the default is reasonable.
App permissions
System Settings → Privacy & Security → Review Camera, Microphone, Files and Folders, Full Disk Access, and Screen & System Audio Recording
macOS requires apps to request permission for sensitive resources. Review each category periodically and revoke access for apps you no longer use or that do not need it. Screen & System Audio Recording and Full Disk Access are particularly broad permissions.
Spotlight
System Settings → Spotlight → Clipboard history → Leave disabled unless you want it
Tahoe adds an opt-in clipboard history to Spotlight, off until you explicitly enable it. If you turn it on, review the retention window and use Clear History periodically, since recently copied text and images become searchable on your Mac.
Background Security Improvements
System Settings → Privacy & Security → Background Security Improvements → On (Automatically Install)
This new pane lets Apple deliver lightweight security patches for Safari, WebKit, and other system libraries between full macOS updates. Leaving automatic installation on is a straightforward security benefit and does not depend on you remembering to update manually.
Trade-offs
- Turning off Significant Locations means Siri suggestions based on location patterns and Maps features like predicted commute times will not work.
- Disabling personalized ads does not reduce the number of ads in Apple apps, only their relevance.
- Enabling the firewall may occasionally require granting access to apps that need incoming connections, such as file sharing.
- Disabling analytics means Apple receives less data to diagnose bugs affecting your Mac model or configuration.
- Turning off “Learn from this Application” means Siri and Spotlight will not surface content from those apps in search.
- Disabling Privacy Preserving Ad Measurement removes a privacy-friendly alternative to more invasive tracking methods.
- Leaving clipboard history off means losing a convenience feature, but nothing is collected that you did not explicitly opt into.
Who should not change these settings
- If you run server software or host services on your local network, the firewall may need specific exceptions or may not be appropriate.
- If you find Siri’s location-based suggestions valuable, keeping Significant Locations on is reasonable; the data stays encrypted on-device.
- If you prefer seeing relevant ads in Apple apps, keeping personalized ads on is a valid choice.
- If you want to help Apple improve its products, leaving analytics on is reasonable.
- If you frequently search back through recently copied text or images, Spotlight’s clipboard history is a genuine convenience worth its small local data footprint.