Privacy.

Mail Shepherd 3.0 (build 454) · Updated October 21, 2026

• Everything stays on this Mac. There’s no Mail Shepherd server or account, and Mail Shepherd never needs your email password.
• What it reads in Mail: each message’s sender, subject, dates, and read, junk and flag status, never message bodies or attachments. It never changes a flag.
• What it changes: your mail only when you click a button, or when an Auto-Sweep you turned on runs. Sweeps mark mail read and junk or not junk, and move it to Trash or your Inbox; only the delete buttons delete mail, and they ask first.
• Mail’s blocked list: read with Full Disk Access, never changed. Mail Shepherd keeps a copy on this Mac for when the list can’t be read.
• Contacts: Mail Shepherd reads your contacts’ email addresses, so their mail is never treated as junk, and saves nothing from Contacts. It changes a contact only when you choose Add to Existing Contact…; Add as New Contact… hands the card to Contacts for you to save.
• Your lists: Blocked Senders, Blocked Domains and Allowed Domains are kept on this Mac.
• Logs: the Action Log, the Auto-Sweep log and the Sweep statistics stay on this Mac, and crash reports from macOS are added to the Action Log. Nothing leaves your Mac unless you send the support log yourself.
• Internet: the only thing Mail Shepherd asks the internet is which build is current, from take66.ai, when it opens and when you choose Check for Updates…. Mail Shepherd Help opens in your browser.

Was this page helpful? Tell us.