Skip to content
← All guides

Check storage

Mac App Store Sandbox: What a Cleaner Can and Can't Do

The MacZentra team · Updated Oct 21, 2026 · 4 min read

If you compare a storage cleaner from the Mac App Store with one you download directly, the App Store one often does less. That is not laziness: it comes from the App Sandbox, a rule every Mac App Store app must follow. Here is what the sandbox is, and how it shapes the MacZentra App Store edition.

What the App Sandbox does

A sandboxed app runs in a small walled area. It can read and write only inside its own container and inside folders you hand it through the standard Open panel. It cannot reach into other apps’ data, run administrator commands, or read system folders on its own.

What changes for a storage cleaner

TaskWeb versionApp Store edition
Scan the whole diskYes, with Full Disk AccessHome folder and folders you choose
List APFS snapshotsYesNo
Flush DNS, purge memoryYes, with your passwordNo
Manage startup itemsYesNo
Command-line toolYesNo
Move files to the TrashYesYes, through a system bridge
Largest items list in the MacZentra App Store edition
Disk maps, large files, duplicates and junk cleanup all work inside the sandbox.

What still works

Plenty. You grant your Home folder once, and the App Store edition draws the Treemap, Sunburst and Tree View, finds large files, duplicates, similar photos and developer junk, clears caches and uninstalls apps. Every deletion goes to the Trash and appears in History, where you can undo it.

Why this is also a benefit

The sandbox limits what any bug could touch. You decide which folders the app can see, and you can remove that access in Settings at any time. For many people that trade-off is worth it, especially when the same subscription also covers an iPhone and iPad.

Everything MacZentra can clean

Treemap and Sunburst disk maps, a duplicate finder, Developer Junk, a complete app uninstaller and more, in one native storage cleaner for Mac that’s about 15 MB.

Explore all features →