Solutions
Your messages, your mail, your photos.
The apps are helpful because they can act. The question nobody can answer offhand is what they are able to touch — and the honest answer on most Macs is more than the owner expected.
A list you can actually read
Every assistant, extension and connector you have installed, and what each one can reach — files, messages, keys, the screen. Named for the app, in order of consequence.
Originals stay originals
Messages, Mail, Photos, keychains and SSH keys have no agent path. A request that points at one is held and you are asked, with the command it was about to run.
Nothing leaves, and there is no account
No sign-up, no upload, no telemetry. The scans, the history and the log are files in your own home folder.
The thing that actually goes wrong
Not someone breaking in. An assistant doing what you asked, against the live copy of something: opening the real message database to answer a question about it, acting on a sentence that was sitting in a screenshot, sending the right file to the wrong place. No prompt appears, because the permission was granted months ago.
Mockingbyrd scans for that shape, shows what it found with the evidence, and writes any fix as a script you read before it runs. Nothing changes until you approve it.
If you use a screen recorder or a message archive
Those stores are the sharpest version of the problem: they hold everything that was on screen or said near the machine, including other people who never agreed to any of it. The answer here is a narrowed read-only copy rather than access to the original, and audio is dropped from that copy at every setting. How the copy is built.
You do not need to be a developer
The app has a plain mode that shows the findings, the fixes and the agents in ordinary words, and a detailed mode for when you want the probe, the file and the line. The score is there to be argued with, not obeyed.