Is CleanMyMac safe or malware?

The genuine CleanMyMac from MacPaw is a legitimate, Apple-notarized app, not malware. The persistent 'it's malware' belief comes from two real things: pirated or cracked copies that do carry malware, and fake scareware pop-ups that impersonate it. The fair criticism of the real app is that it can be aggressive, not that it is a virus.

Do I actually need a cleaner app for my Mac?

No. Apple's own guidance for freeing space is entirely built in, and macOS clears safe caches and logs on its own. The genuinely useful tools are the ones that show you your disk and let you decide what to remove, rather than silently deleting things the system manages.

Are Mac cleaner apps a scam? An honest answer

Q: Are Mac cleaner apps a scam?

The well-known, Apple-notarized ones are not scams or malware, but the category oversells itself: macOS already clears the caches and logs that are safe to clear, so most of what a general cleaner promises is unnecessary. The actual scams are the fake 'your Mac is infected' pop-ups that impersonate cleaners, and pirated copies of real cleaners that carry malware.

The short version

The well-known, Apple-notarized cleaners are not malware. That belief is a myth with a real origin.
But the category oversells itself: macOS already clears the caches and logs that are safe to clear.
The genuine scams are fake "your Mac is infected" pop-ups that impersonate cleaners, and pirated copies that carry malware.
The useful tools show you your disk and let you decide. The risky ones silently delete things the OS manages, like logs.

Why this question is everywhere

Search Reddit for Mac cleaners and you will find the same thread a hundred times: someone's Mac is low on space, they install a popular cleaner or see an alarming pop-up, and they ask whether the whole genre is a con. The replies split into two camps that are both partly wrong: "they're all malware, never install one," and "this one changed my life, buy it." The honest position sits between them, and getting it right matters, because the confusion is exactly what the real scams rely on.

Myth: the popular cleaners are malware

Let us deal with the biggest claim first, because it is false and it muddies everything else. The well-known commercial cleaners, CleanMyMac being the most cited, are legitimate, Apple-notarized applications, not viruses. Notarization means Apple has scanned the build for known malware before it is allowed to run normally. The maker of CleanMyMac, MacPaw, is an established company with millions of users, its app on the Mac App Store and Setapp, and recognised security certifications. Whatever you think of it, "malware" is not accurate.

The myth

CleanMyMac and apps like it are malware that will infect or break your Mac.

The reality

The genuine apps are notarized and legitimate. The fair criticism is that they can be aggressive, deleting things macOS would rather manage, not that they are viruses.

So where did "it's malware" come from?

The belief is not baseless; it grew from two genuinely real things, and knowing them is how you stay safe.

1. Fake "your Mac is infected" pop-ups

This is the actual scam, and it impersonates cleaners. You are browsing, and a full-screen page hijacks your window: "Your Mac is infected with 3 viruses! Scan now!" with a countdown and an Apple logo. It is not from Apple and it is not from any real cleaner. It is a scareware ad, and the "Scan Now" button downloads junk, sometimes a genuinely unwanted app. Because these ads dress themselves up as cleaning or antivirus tools, people reasonably conclude that cleaners are scams. The pop-up is the scam; it is just wearing a cleaner's clothes.

How to spot the fake

A real macOS alert is small, quiet, and appears as a standard dialog, usually near the top-right. It never takes over your whole screen, never shows a countdown timer, and never tells you to call a number or "scan now." Anything full-screen, urgent, and demanding immediate action is a scam. Close the tab; do not click inside it.

2. Pirated and cracked copies

Popular paid cleaners are heavily pirated, and cracked copies downloaded from sketchy sites frequently carry real malware bundled in. So some people genuinely did get infected "by CleanMyMac," except it was not CleanMyMac; it was a tampered copy from a piracy site. The danger was the pirate build, not the product. This is a good general rule for any Mac software: get it from the developer or the App Store, never from a torrent or a "free download" mirror.

Three different things get called "Mac cleaner scams." Only two of them actually are.

The uncomfortable part: the category oversells itself

Here is where we, as makers of a cleaner, have to be honest. Even the genuine apps promise more than they can deliver, because the premise, that your Mac accumulates "junk" it cannot handle and needs a third-party app to maintain, is mostly outdated. Modern macOS maintains itself.

Apple's own guidance for freeing space names no third-party tool; it is entirely built in. And Apple states plainly that the system already does the housekeeping people buy cleaners for: "When space is needed on your Mac, macOS also clears caches and logs that are safe to delete." The maintenance scripts cleaners used to run were removed from macOS in 2024. The "repair permissions" step was removed in 2015. Freeing up RAM does not speed anything up. A great deal of what a general-purpose cleaner's dashboard offers is either automatic or useless.

We cover each of these in detail

See Nine Mac cleaning myths that waste your time and Does clearing cache speed up your Mac? for the evidence on RAM, caches, maintenance scripts and permissions.

When a cleaner is actually harmful

The real risk from a legitimate cleaner is not infection; it is over-aggression. Some delete things macOS is responsible for and relies on. The clearest example is log files. Howard Oakley, who documents macOS internals independently, is blunt about it: "If the housekeeping app you use deletes log files, I'd consider that to be malicious," because those logs feed Time Machine diagnostics and the security scans that protect you. Deleting language files, "orphaned" support files a cleaner guesses are unused, or caches an app actually needs can quietly break things too. The damage is usually recoverable, but it is damage the tool caused in the name of cleaning.

So what is actually worth using?

The useful distinction is not "cleaner versus no cleaner." It is tools that show you and let you decide versus tools that silently delete on your behalf.

The best-regarded utilities in this space are the ones that never auto-delete: disk visualizers like DaisyDisk and the open-source treemap viewers. They show you what is large and make you confirm every removal. That is the honest shape of a storage tool: it respects that only you know whether a file matters. The tools to be wary of are the ones with a big "Clean" button that sweeps away gigabytes of "junk" you never got to see.

A fair checklist for any cleaner

Before trusting one, ask: Is it notarized and from the developer or App Store? Does it show you what it will remove before doing it? Does it explain what each item is and whether it comes back? Does it leave logs, keys, credentials and your own files alone? Can you undo? A tool that answers yes to all of these is a world apart from a scareware pop-up.

Where we stand, as a cleaner

We will not pretend the category is blameless, because we would be lying and you would catch us. StorageSage exists because the honest version of a cleaner is genuinely useful: not a magic "Clean" button, but a clear map of your disk with every known item labelled by what it is and what it costs to get back. It does not free RAM, run maintenance scripts, repair permissions or delete your logs, because none of those help and one of them harms. It shows you what is there, explains it, and sends anything you remove to the Trash first so you can undo it. If that sounds less exciting than "speed up your Mac in one click," that is rather the point.

The honest bottom line

Are cleaner apps a scam? The genuine, notarized ones are not. But many oversell what they can do, because macOS maintains itself.
The real scams are fake "your Mac is infected" pop-ups and pirated copies of real apps. Those are worth genuine caution.
Do you need one? Not for maintenance. You might want one to see and understand your disk, which is a real, honest use.
If you use one, pick a tool that shows before it deletes, explains what things are, leaves system files alone, and can undo.

A cleaner that shows its work

StorageSage maps your disk, labels every known item Safe, Rebuilds or Review, explains what each one is, and never touches logs, keys, credentials or your own files. Everything goes to the Trash first, and nothing leaves your Mac.

Download for macOS

Sources

Apple — Mac User Guide on optimizing storage (freeing space is built in; macOS clears safe caches and logs).
Howard Oakley, The Eclectic Light Company — on the risks of apps that delete logs, and on what macOS manages itself.
On notarization and the cleaner landscape: Apple's notarization process; reporting on MacPaw and CleanMyMac; documentation of fake "your Mac is infected" scareware and the risks of pirated software. Where this article paraphrases community consensus, it is identified as such.