Why Do Picture-in-Picture Apps Need Screen Recording Permission? (And Where Your Pixels Go)

The first time you turn a window into a mini window in PipNow, macOS shows a dialog:

“PipNow” would like to record the contents of your screen.

Hesitating here is the right instinct. Screen Recording is one of the most powerful permissions macOS grants — a malicious app holding it could theoretically read everything on your display. So this post won’t ask you to click Allow on faith. It explains three things: why the system requires this permission, where the pixels actually go, and how to verify everything we claim.

1. The permission model: one to see, one to act

Turning any window into picture-in-picture requires two capabilities:

Seeing the window’s content. An app’s window belongs to that app; no other app may read it by default. macOS’s rule: reading another app’s visuals across app boundaries requires the user-approved Screen Recording permission. PipNow captures the target window frame-by-frame through Apple’s official capture framework (ScreenCaptureKit) — the sanctioned path, the same mechanism behind the system’s own screen sharing.

Acting on the original window. Hover-to-preview, clicking buttons and typing inside a pinned preview — these “remote” interactions rely on macOS’s Accessibility permission, which lets PipNow pass your clicks and keystrokes through to the original window.

Without the first, the mini window is black. Without the second, it’s look-but-don’t-touch. That’s why PipNow asks for both on first use, and why both are documented in the privacy policy.

2. The pixel pipeline: window → memory → mini window

Here is the complete journey of a single frame:

1. The system captures a frame of the target window (ScreenCaptureKit hands it straight to the PipNow process);
2. PipNow scales and renders the frame in memory to the mini window’s size;
3. The rendered result is drawn onto your mini window. Done.

Note what’s missing from this pipeline: no disk writes (no screen recordings, no screenshots), no network requests (no server sees a single pixel), no retention (frames are discarded after use).

“Recording” is honestly a scary word for what’s happening — it’s a live mirror: the window reflects into the mini window like a mirror, and there’s no tape hidden behind it.

3. Our concrete commitments

All of this is in the privacy policy, not invented for this post:

• No account system: there is nothing to log into, so nothing is tied to you;
• No telemetry, no analytics: we don’t count your sessions or feature usage — we couldn’t see it even if we wanted to;
• No third-party SDKs: no ad or tracking components bundled in;
• Everything local: frames and settings live and die on your Mac.

There’s a structural bonus: we lack the infrastructure to collect data even if we wanted to. No servers, nowhere for pixels to go.

4. Don’t trust us — verify us

This is the most important section. Trust should rest on verifiable facts, not slogans:

1. The offline test: turn off Wi-Fi and use every feature — everything works. An app that needs to upload frames to function can’t do this;
2. Inspect the network: check PipNow’s connections with Little Snitch or lsof — you’ll find no external connections during normal use;
3. Revoke anytime: System Settings → Privacy & Security → Screen Recording — untick PipNow and it becomes blind instantly;
4. Uninstall cleanly: drag the app to the Trash; local data and the permission association end with it.

And a system-level backstop: when any app uses its Screen Recording permission, macOS shows an orange indicator in the menu bar. The system is watching us on your behalf.

5. FAQ

Does it secretly save recordings? No. There’s no write-to-disk logic, and saving frames serves no purpose for this feature.

Are frames sent to a server for “processing”? No. Scaling and rendering happen in your Mac’s memory. There is no server-side code that could receive them.

I only want to watch, not interact — can I skip Accessibility? Yes. Grant Screen Recording only, and mini windows plus hover-to-preview work fine; pinned-preview interaction (clicking and typing inside) will be unavailable.

Can other apps peek at my screen now? Screen Recording is granted per app and revoked per app. Granting PipNow says nothing about any other app, and each app holding the permission gets its own menu bar indicator.

---

If that settles it, read why we built PipNow or jump straight into the practical tips.