UpdateDrift

Who it's for

Solo lawyers, therapists, journalists and defense-adjacent consultants on personal Macs/iPhones; today they cope by manually re-checking System Settings after each update, following blog-post hardening checklists, or just hoping — MDM (Jamf/Kandji at $4+/device/mo) is priced and built for managed fleets, not a one-person practice.

The problem

Legal + time: two front-page stories in 24h document Apple overriding stated user choice (Intelligence re-enabled after opt-out, persistent unremovable ads); each point release risks confidential client data being processed by a re-enabled intelligence feature, a 20-toggle manual audit costs ~45 minutes per device per update, and with no timestamped record the user cannot prove to a client, bar association or AG what state the device was in when privileged data sat on it.

How to build it

Native macOS menu-bar app (Swift, no cloud): snapshot engine over CFPreferences/defaults and documented management keys for ≥25 named settings (Apple Intelligence, Siri dictation analytics, personalized ads, diagnostics sharing...), update-completion hook triggers re-verification, one-click re-assert via defaults write/declarative profiles for the writable subset, signed PDF+JSON receipts verified offline against a published public key; iOS covered by guided Shortcuts export + checklist diff.

How it makes money

$39/yr solo, $199/yr 5-device 'practice pack' with a combined attestation ledger; they pay because the signed receipts are the only evidence format a confidentiality audit or client NDA review accepts, and the free alternative (manual checklist after every update) has no alerting, no re-assert and no proof — Little Snitch at €59 proves Mac users pay this price for privacy tooling.

Why it doesn't exist yet

Incumbents skip it because Apple will never ship a watchdog over its own consent overrides, and MDM vendors only manage supervised, company-owned fleets and largely ignore consumer-grade intelligence/ad toggles on personal machines. The indie gap: a single-purpose app whose watched-key list must be updated within days of each OS point release — a maintenance cadence a 1-3 person team beats platform vendors at.

First users

The 778-point dbushell thread and 558-point iOS-ads thread are full of the exact buyers this week; a free one-shot 'did YOUR settings flip?' scanner posted to HN/r/macapps/infosec Mastodon is the funnel, converting to the paid always-on watcher plus receipt export.

Build size

1 person x 8 weeks. Included: macOS watcher for ≥25 keys, update-hook detection, alert + one-click re-assert, signed PDF/JSON receipt, public verification page, free scan-only mode. Excluded: on-device iOS monitoring (guided export only), Windows/Android, fleet dashboard, any cloud sync.

Biggest risk

Concrete kill event: Apple ships a per-setting change history plus opt-outs that verifiably survive updates in a macOS 26/27 point release, gutting the pitch; secondary risk is notarization/Full-Disk-Access friction making key reads unreliable.

Conditions for a hit (all 3 required)

• A stranger can install the menu-bar app, see ≥25 named privacy settings with live state, and observe an alert appear within 15 minutes after a watched setting flips following an OS update or silent server-side change
• A 'Re-assert' button restores the user's previously saved choices for the writable subset and displays a per-setting before/after log of what was changed back
• 'Export attestation' produces a timestamped, signed PDF+JSON receipt listing every watched setting's state, whose signature verifies offline via a published public key and public verification page

How it's judged (in 6 months)

Live public product page with pricing, plus at least one of: Product Hunt daily top 5, inclusion in the Setapp catalog, or ≥1,000 stars on its associated GitHub repo(judgment date 2027-03-26)

AI self-confidence 42/100 — self-reported likelihood of meeting the criterion, not a business success rate