Permissions
Every permission Push asks for, why, when — and the ones it deliberately never requests.
Push asks for a permission when a feature needs it, not at first launch. Every grant is made by you in a system dialog, and the context-shaped ones — contacts, calendar, location — are read locally as context: the bytes stay on your Mac and are never sent to a server. Agents can never flip a permission switch; grants are human-only.
On the Mac
| Permission | Why | When you're asked |
|---|---|---|
| Microphone | "Push needs microphone access to record meeting notes you start from Push, and so tools you run inside Push — like Claude Code's voice input — can capture audio." | First meeting recording, a voice comment, or a CLI in a tab using the mic. |
| System audio | "Push records system audio during meeting recordings so the notes capture what other participants say, not just your microphone." | Only if you enable Capture system audio for Meeting recording (Beta). |
| Contacts | "Push looks up a contact's phone or email only when you ask an agent to reach someone — so an issue comment can carry a one-tap reply link (message, call, or email). Contacts never leave this Mac." | Only when a feature needs a contact lookup, or from Settings → Permissions. |
| Calendar | "Push uses this Mac's local Apple calendar for native calendar features — your local calendar, not an external connector like Google Calendar. Calendar data stays on this Mac." | Only for local calendar features (e.g. naming a meeting recording). |
| Location | "Push uses this Mac's location for local, location-aware features. Location stays on this Mac." | Only for local location-aware features. |
| Notifications | Standard macOS notification permission. | Only after you interact with a notification-related control — never silently at launch. |
Settings → Permissions shows the live status of each grant (Allowed, Denied, Not requested…) with a button to request it or jump to System Settings.
What the Mac app deliberately does NOT request
- No Screen Recording.
- No Accessibility access.
- No Full Disk Access.
- No automation / Apple Events control of other apps.
If you ever see Push in one of those System Settings lists, something is wrong — tell us.
Honest footnotes for the technically curious
- Push is not sandboxed. It's a terminal that spawns the agent CLIs you
installed, reads their session stores (like
~/.claude), and keeps your workspace in~/.push/— that requires normal, non-sandboxed file access to your home folder, the same as other terminals. The app is signed, notarized, and hardened-runtime. - No login item. Push does not start itself at login or install anything that runs when the app is closed.
- Always On uses a helper daemon. If you enable Settings → Always On ("Never sleep while plugged in"), Push registers a small system helper — visible in System Settings as a background item — whose only job is holding your Mac awake while Always On is enabled. Turn Always On off and it stops; it does nothing else and touches no data.
- File access is a switch agents can't reach. Settings → Workspace → File access (and file publishing) are controlled only by you; there is no API an agent could use to enable them.
On the iPhone
| Permission | Why | When you're asked |
|---|---|---|
| Microphone | "Push needs microphone access to record voice notes and transcribe them into tasks." | Your first voice capture. |
| Notifications | Alerts about agents, approvals, and mentions — tuned per-kind in Settings → Notifications. | When you enable notifications. |
| Camera | "Push uses the camera to scan QR codes for connecting to Push server." | Only in Workspace → Advanced → Scan QR Code pairing. |
| Photo library | "Push can automatically attach photos and screenshots you take during hands-free recording to provide visual context for your tasks." | Only if you turn on Auto-add Images During Recording. |
| Location | Used only if you turn on Capture Location on Notes (Settings → Transcription & Data), which saves your location on the notes you create, shown on the card. | Only when you enable that setting. |
The iPhone app does not read your Apple Reminders, calendar, or contacts.
Uninstalling completely
Mac: quit Push, move Push.app to the Trash, and delete ~/.push/ —
that removes the app, your entire workspace, logs, and secrets. If you had
used Always On, its helper unregisters when disabled and disappears with the
app under System Settings → General → Login Items & Extensions. If you
paired a phone, revoke devices first (Settings → Workspace → Devices) or
just delete the account from the iPhone.
iPhone: delete the app. Your captures live on your Mac, so deleting the iPhone app loses nothing that synced. To remove your account and sign-in identity entirely, use Manage → Delete Account first — it offers Export My Data First and, as the app itself puts it: "Your todos, files, and voice recordings live on your Mac — deleting your account doesn't touch them."