Is iCloud Bookmarks safe?

Clean risk

iCloud Bookmarks transmits your complete bookmark tree to the native iCloud Bookmarks app on your Mac via native messaging.

On startup, the extension reads your full bookmark tree using the bookmarks API and sends each folder and bookmark entry to the native host com.apple.bookmarks. It then continues to forward incremental changes — additions, removals, moves, and edits — as they occur, keeping the macOS iCloud Bookmarks app in sync.

Apple Inc.v2.3.40Firefox Add-ons
1Risk
Who publishes it

Apple Inc. - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Apple Inc.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.3.40. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your bookmarks

    bookmarks

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed iCloud Bookmarks contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • com.apple.bookmarks (native host)

    iCloud Bookmarks sends data to com.apple.bookmarks (native host). Named as a recipient in this extension's own analysis.

Updated 2 November 2026amo-462729