Library access is not attachment sanitization
iPhone Limited Photo Access: What Does It Protect?
Limited Photos access restricts library items available through that permission; it does not redact selected photos or guarantee metadata absence. Review Settings → Privacy & Security → Photos for each app. A system picker and broad library access are different mechanisms, so a missing permission entry is not automatically a fault.
By Qingxin Studio, the developer of HushPic · Updated
Review one app’s permission at a time
Open Settings → Privacy & Security → Photos and select the relevant app if listed. Read its current access and the choices your iOS version offers. Do not grant full access simply to make an upload work when selecting a few images satisfies the task.
Apple’s limited-library model lets you choose assets available through that authorization. Check the actual selection when changing it. This guide does not change permissions for you or claim every app needs the same setting.
Distinguish a picker from continuous access
A system photo picker lets you deliberately hand selected items to an app while keeping the rest of the library private. An app may offer Choose Photos without the broad permission you expected. Follow the actual prompt instead of searching for a nonexistent full-access requirement.
Identify the destination app and exact prepared image before selecting. A smaller selection narrows what you hand over; it does not inspect that selection’s contents. Do not include an unedited original beside a covered version by mistake.
Understand what revocation cannot establish
Reducing future library access and removing a copy already imported into another app are separate tasks. Review that app’s saved items, account storage, and sent messages through its own controls. A permission switch supplies no evidence that earlier copies were recalled or deleted.
For a specific disclosure concern, identify the actual destination and file rather than repeatedly toggling permissions. This checklist is not an audit of another app’s server storage or network behavior. Consult its policy and account controls for those questions.
Prepare the selected file independently
Inspect visible details and readable metadata before handing over the output. The local browser tool checks supported metadata categories without uploading the file, but cannot inspect pixels, change permissions, clean files, or generate verified copies. An error is not a clean result.
HushPic processes supported photos on-device into separate copies and checks written output within scope. Review suggestions for missed details and regenerate after adjustments; originals stay unchanged. Purchases and diagnostics may connect without photo contents. Neither preparation nor limited access controls recipients’ later handling.
Sources
This guide is published by Qingxin Studio, the developer of HushPic. Product claims describe our supported workflow, not independent certification. Our review checklists are practical first-party guidance; linked platform sources support only the mechanisms they describe. Automatic checks may miss details. Read our content and corrections policy.