Skip to content

Photo access leak check

Checks your own Mac and iPhone for every place your photos can leak to: apps with access to the whole camera roll, sync apps you forgot about, profiles, VPNs and apps reading your photo library right now. It writes a report of what to turn off and changes nothing itself.

PersonalWorks with Claude Code · Claude Desktop with MCPCommunity example
Build your promptSee requirements

What it does

  • Lists apps with full Photos library, Full Disk Access or Screen Recording access
  • Finds sync and backup apps and photo folders inside synced locations
  • Shows open connections to non Apple servers and apps that uploaded a lot
  • Walks you through the iPhone checks by hand
  • Writes a report that never leaves your computer

Your approval boundaries

Read only

Reads connected data. It does not send messages or change records.

You decide what happens next.

More about this workflow

This setup is for busy people who want their own day to run a little smoother. It takes a repeat chore off your plate and hands back something you can check quickly.

First, it lists apps with full Photos library, Full Disk Access or Screen Recording access. Next, it finds sync and backup apps and photo folders inside synced locations. Then it shows open connections to non Apple servers and apps that uploaded a lot. After that, it walks you through the iPhone checks by hand. Finally, it writes a report that never leaves your computer. It works with your photo storage, each on its own login with limited access.

You get the finished work, ready to read. It only reads, so nothing is sent, changed or paid for. You decide what to do with it.

“it does not change, delete or upload anything”
0xGoldTooth 0xGoldTooth on GitHub · Oct 31, 2026
Before you startPhoto storage accessRead-only permissionsClaude Code or Claude Desktop with MCP
Explore required tools and model recommendations

Tools and access

  • Photo storage

    Handles the photo storage part of this job. Grant read-only access to one photo folder.

    API required: No. A shared folder or drive for item photos. No API needed if the agent can read it.

    No sign-up needed

Official links only. Not sponsored, no affiliate links.

Model recommendations

Best pick

Claude Sonnet 5.5

Fast and careful with your inbox and calendar.

$2 per million input tokens, $10 per million output tokens.

Anthropic docs as of October 11, 2026

Cheaper backup

Claude Haiku 5.5

Cheapest Claude option for daily sorting.

From $0.10 per million input tokens and from $0.50 per million output tokens.

Anthropic docs as of October 11, 2026

Our own picks. Not sponsored, no affiliate links.

Build your prompt

Add your details, then copy the prompt into your tool.

1Your details

Fill these in and the prompt updates as you type.

mac, iphone or both

optional

on or off

2Your prompt

4 of 4 still empty
Fill these in before you run it: [DEVICE: mac, iphone or both] [FULL DISK ACCESS FOR TERMINAL: optional] [DNS LOOKUPS: on or off] [REPORT FOLDER] You are the Photo access leak check agent. Checks your own Mac and iPhone for every place your photos can leak to: apps with access to the whole camera roll, sync apps you forgot about, profiles, VPNs and apps reading your photo library right now. It writes a report of what to turn off and changes nothing itself. Use only the details filled in above. If any [BRACKETED] item is still blank or unclear, stop and ask for it first. Do not guess. What you do on your own: - Lists apps with full Photos library, Full Disk Access or Screen Recording access - Finds sync and backup apps and photo folders inside synced locations - Shows open connections to non Apple servers and apps that uploaded a lot - Walks you through the iPhone checks by hand - Writes a report that never leaves your computer What you must never do without a yes from a person: - Anything that writes, sends, or spends. This job only reads. Rules: - Before any step on the list above, stop and ask. Say in plain words what you want to do, who it affects, and whether it can be undone. - If something cannot be undone, say so first, in one short line. - Write drafts, not final actions. A person sends, pays, posts, or deletes. - Keep a short log of every action you took and every source you read. - If you are unsure, ask instead of guessing.
View run instructionsPaste into: Claude Code, Claude Desktop with MCP

Your answers stay in this browser only.

Run your workflow

Connect your tools with only the access this setup needs, then follow these steps.

Steps

Do these in order. Test on old data before it touches live work.

  1. 1Set up Photo storage. Keep it to read-only access to one photo folder.
  2. 2Paste the prompt where your harness takes instructions. See the note under the Copy button.
  3. 3Do a dry run on old or test data first. Check every draft and every stop point by hand before you let it near live work.
  4. 4Read its log after the first real run. Only widen access once a week of runs looks clean.

Safeguards and trust score

The score describes this example setup’s access, approval boundaries, ability to undo changes, and scope.

Access30 / 30

Read only. It never writes, sends or spends.

Human approval30 / 30

Nothing to approve, it only reads.

Undo and logs20 / 20

No changes to undo. Reads can be logged.

Scope20 / 20

Runs on its own login across 1 tool. Fewer connections means a smaller blast radius.

How to raise it

Nothing major to fix. One polish tip: show a short daily log of what it read, so you can spot it reaching for anything new.

Reviewed by Trustcase (example setup). How scoring works

Embed badge

Show this trust score on your site or README. It links back here.

Trustcase trust score badge
Markdown
[![Trustcase trust score for Photo access leak check](https://trustcase.dev/badge/photo-access-leak-check.svg)](https://trustcase.dev/use-cases/photo-access-leak-check)
HTML
<a href="https://trustcase.dev/use-cases/photo-access-leak-check"><img src="https://trustcase.dev/badge/photo-access-leak-check.svg" alt="Trustcase trust score for Photo access leak check" height="20"></a>

More personal workflows

  • Booking emails to shared calendar

    A scheduled routine reads Gmail every hour and puts flights, trains, hotels, car rentals, reservations, tickets and deliveries into one shared calendar. It only edits events it created, marks unclear ones with a question mark, and never sends, replies or archives.

  • Weekly plan proposal you approve

    A student juggling classes and a dozen internship processes runs a Sunday routine that triages the calendar and proposes the next two weeks in 25 minute focus blocks on a separate calendar. A weekday morning brief reads the same sources. Suggestions become commitments only after approval.

  • Inbox sorter

    Clears the noise so you only see email that needs you.

  • Calendar guard

    Protects focus time and catches double bookings.

Other workflows that use the same tools

  • Listing writer

    Ecommerce and resale. Writes marketplace listings from your photos and a model number.

  • Monthly contractor invoice builder

    Operations. Builds your monthly invoice and timesheet PDF from weekly timesheet screenshots. It checks the hours before filling your template.

  • Digital download listing drafts

    Ecommerce and resale. Turns a product idea you approved into a draft listing for a digital download, with the cover, mockups and the file. Nothing goes live until you publish it.