MirrorUE is a local development tool. It does not include analytics, accounts, or cloud sync.
MirrorUE only communicates with an iPhone that the user has:
- Physically connected (USB),
- Unlocked,
- Trusted (“Trust This Computer”),
- Authorized for development (Developer Mode).
Screen content and injected input stay on the Mac ↔ phone path (CoreMediaIO + CoreDevice). There is no MirrorUE backend that receives frames or keystrokes.
| Permission | Why |
|---|---|
| Camera / screen capture | CoreMediaIO iPhone screen device |
| Local network | CoreDevice Network usbmux peer for HID |
When MirrorUE is running, an HTTP API listens on 127.0.0.1:8090 only (loopback). Non-local clients are rejected. Do not expose this port via port-forwarding or a public VPN without additional auth.
- Pairing records / lockdown certificates
- Device UDIDs in public bug reports without consent
- Screen recordings that contain personal data
Some apps intentionally black out under screen capture. That is an OS / content-protection decision, not a MirrorUE bug.