macOS Technical Note: Privileged Helpers, dragging to Trash, and EtreCheck

From	"David B." <"David B."@invalid.org>
Newsgroups	alt.computer.workshop, uk.comp.sys.mac
Subject	macOS Technical Note: Privileged Helpers, dragging to Trash, and EtreCheck
Date	2026-05-27 15:03 +0100
Organization	Retired
Message-ID	<n7obu5F9snuU1@mid.individual.net> (permalink)

Cross-posted to 2 groups.

Show all headers | View raw

Hello again, folks! 😄

There has been some discussion across recent threads about standard
macOS uninstallation behaviour — specifically whether dragging an
application bundle ('App') to the Bin is sufficient for all software.

For most applications, it is. Self-contained, sandboxed apps leave
nothing behind that matters, and dragging to the Bin is perfectly
adequate. However, a distinct technical exception applies to utilities
that require elevated privileges to scan system hardware, read
restricted logs, or monitor storage health.

EtreCheck is a prime example of this class of software.

To perform its deep system analysis, EtreCheck installs a *Privileged
Helper Tool* — an elevated background daemon that requires admin
authorisation on first run. This is entirely legitimate behaviour, but
it has a practical consequence for uninstallation.

*The problem with "drag to Bin" for this category of software*:-

1. *The App Bundle* — Dragging the `.app` to the Bin removes the user-
facing interface, as expected.

2. *The Lingering Daemon* — macOS does not automatically unregister or 
remove privileged helpers when their parent app is trashed.

3. *The Binary* — The helper executable persists in the root-level 
directory `/Library/PrivilegedHelperTools/`.

4. *The Property Lists* — Associated configuration files remain in the 
system launch directories.

For ordinary apps that only write to `~/Library/Application Support/` or
`~/Library/Caches/`, this isn't a concern — those files are dormant and
easily ignored or removed. But when a utility has installed a persistent
background daemon that survives deletion of the main app bundle, a
dedicated uninstaller (or at minimum an inline **Uninstall** menu
option) is not just courteous — it's the correct design choice. Without
one, users are left manually navigating root-level directories to remove
components most wouldn't know to look for.

Hopefully this clarifies things for anyone tracking file-system
behaviour or managing utility software on their Macs.

-- 
I hope this helps.
Kind regards,
David

Back to uk.comp.sys.mac | Previous | Next — Next in thread | Find similar

Thread

macOS Technical Note: Privileged Helpers, dragging to Trash, and EtreCheck "David B." <"David B."@invalid.org> - 2026-05-27 15:03 +0100
  Re: macOS Technical Note: Privileged Helpers, dragging to Trash, and EtreCheck Brock McNuggets <brock.mcnuggets@gmail.com> - 2026-05-27 14:29 +0000
    Re: macOS Technical Note: Privileged Helpers, dragging to Trash, and EtreCheck Gremlin <nobody@haph.org> - 2026-05-27 15:15 +0000
      Re: macOS Technical Note: Privileged Helpers, dragging to Trash, and EtreCheck Brock McNuggets <brock.mcnuggets@gmail.com> - 2026-05-27 15:34 +0000
    Re: macOS Technical Note: Privileged Helpers, dragging to Trash, and EtreCheck "David B." <"David B."@invalid.org> - 2026-05-27 18:34 +0100
      Re: macOS Technical Note: Privileged Helpers, dragging to Trash, and EtreCheck Brock McNuggets <brock.mcnuggets@gmail.com> - 2026-05-27 20:00 +0000
        Re: macOS Technical Note: Privileged Helpers, dragging to Trash, and EtreCheck "David B." <"David B."@invalid.org> - 2026-05-27 23:36 +0100
          Re: macOS Technical Note: Privileged Helpers, dragging to Trash, and EtreCheck Brock McNuggets <brock.mcnuggets@gmail.com> - 2026-05-27 23:33 +0000
    Re: macOS Technical Note: Privileged Helpers, dragging to Trash, and EtreCheck "David B." <"David B."@invalid.org> - 2026-05-28 12:48 +0100
  Re: macOS Technical Note: Privileged Helpers, dragging to Trash, and EtreCheck Brock McNuggets <brock.mcnuggets@gmail.com> - 2026-05-27 20:31 +0000
    Re: macOS Technical Note: Privileged Helpers, dragging to Trash, and EtreCheck "David B." <"David B."@invalid.org> - 2026-05-27 23:42 +0100
      Re: macOS Technical Note: Privileged Helpers, dragging to Trash, and EtreCheck Brock McNuggets <brock.mcnuggets@gmail.com> - 2026-05-27 23:39 +0000
        Re: macOS Technical Note: Privileged Helpers, dragging to Trash, and EtreCheck "David B." <"David B."@invalid.org> - 2026-05-28 08:48 +0100
          Re: macOS Technical Note: Privileged Helpers, dragging to Trash, and EtreCheck Brock McNuggets <brock.mcnuggets@gmail.com> - 2026-05-28 12:26 +0000

csiph-web