--- title: Why does Mail app contact iCloud when sending a... description: When sending an email from a non-iCloud account in macOS Mail app, the app unexpectedly triggers connections to iCloud's gateway even when iCloud Mail is fully... canonical: https://daily.dev/posts/why-does-mail-app-contact-icloud-when-sending-a-non-icloud-email--3l5ian2cx twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Why does Mail app contact iCloud when sending a non-iCloud email? | daily.dev og:description: When sending an email from a non-iCloud account in macOS Mail app, the app unexpectedly triggers connections to iCloud's gateway even when iCloud Mail is fully... og:url: https://daily.dev/posts/why-does-mail-app-contact-icloud-when-sending-a-non-icloud-email--3l5ian2cx og:image: https://api.daily.dev/og/posts/3L5Ian2CX.png og:image:alt: Why does Mail app contact iCloud when sending a non-iCloud email? og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Why does Mail app contact iCloud when sending a non-iCloud email? **[Hacker News](https://daily.dev/sources/hn)** · 2 min read · 0 upvotes · 0 comments ## Summary When sending an email from a non-iCloud account in macOS Mail app, the app unexpectedly triggers connections to iCloud's gateway even when iCloud Mail is fully disabled in System Settings. The cloudd and nsurlsessiond processes attempt to reach CloudKit API endpoints for querying and saving records. Certificate pinning prevents traffic inspection via Proxyman, and network extensions don't expose unencrypted data either, leaving the reason for these connections unknown. The author has resorted to blocking these connections via Little Snitch rules as a workaround. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Community take How the wider developer community reacted, aggregated from 1 discussion and 71 comments across hackernews (as of 2026-08-03). **TL;DR:** The community is largely critical of Apple's Mail app making undisclosed iCloud connections when sending non-iCloud emails, though a likely benign explanation emerged: syncing previous recipients over iCloud (with the payload being E2E encrypted). Some commenters see it as surveillance/telemetry overreach, while others draw comparisons to similar behavior from Microsoft and Adobe. **Sentiment:** 10% positive · 40% mixed · 50% skeptical **The case for** - A plausible and relatively benign explanation was identified: the connections appear to sync previous recipients via iCloud, with the payload being end-to-end encrypted ciphertext. - The 'Mail Drop' feature (large attachment hosting) is a known, documented reason cloudd might be invoked, though it only applies to attachments over 20MB. **The pushback** - Apple's use of certificate pinning prevents users from inspecting what data is actually being sent, undermining transparency. - The connections occur even when iCloud Mail is fully disabled in System Settings, violating user expectations about what disabling a service means. - The author had to resort to a third-party firewall (Little Snitch) as a workaround, with no official explanation or opt-out provided by Apple. - Apple markets itself heavily on privacy, yet its native mail client makes undisclosed network calls to Apple servers during non-iCloud email operations. **By community** - hackernews (skeptical): Commenters are broadly suspicious of Apple's undisclosed iCloud connections, though the thread converged on a likely explanation (recipient syncing with E2E encryption), and several drew parallels to similar telemetry behavior from Microsoft and Adobe. **Hottest debate:** Whether Apple's iCloud connections from Mail represent genuine privacy violations/surveillance or are benign, documented features (like recipient syncing or Mail Drop) that users are simply unaware of. **Open questions** - Why do these iCloud connections fire even when iCloud Mail is explicitly disabled in System Settings? - Is there any official Apple documentation explaining what data cloudd sends during a non-iCloud email send? - Should Apple provide a clear opt-out for recipient syncing and other iCloud-backed Mail features? **Highlights** > I think this is correct, and I've now added addendums to the blog post. > — [lapcat on hackernews](https://news.ycombinator.com/item?id=49159590) > Verified - and the actual payload to the iCloud endpoint is e2e encrypted ciphertext. > — [pinkyboy on hackernews](https://news.ycombinator.com/item?id=49159903) > the marketing name is "Mail Drop", and it is separate from iCloud mail; though it should only fire if there's a 20mb+ attachment on the email. cloudd is used by a shit-ton of services though, so I'm not sure how to track it down without better tracing of what actually initiated the call, or the contents of the call. > — [pinkyboy on hackernews](https://news.ycombinator.com/item?id=49158406) > I've disabled Handoff. Also, why would Handoff be triggered by sending an email rather than composing an email? Mail app uses IMAP for syncing mailboxes. > — [lapcat on hackernews](https://news.ycombinator.com/item?id=49158245) > Probably Handoff and cross-device application state syncing. > — [speak\_plainly on hackernews · 3 comments](https://news.ycombinator.com/item?id=49157528) **Source threads** - [hackernews](https://news.ycombinator.com/item?id=49156299) · 55 points · 71 comments ## Similar posts on daily.dev - [Apple plans to change its Hide My Email privacy feature that could make it less effective](https://daily.dev/posts/apple-plans-to-change-its-hide-my-email-privacy-feature-that-could-make-it-less-effective-d4e2q67et) · TechCrunch · 0 upvotes · 0 comments - [We Intercepted the White House App's Network Traffic. Here's What It Sends.](https://daily.dev/posts/we-intercepted-the-white-house-app-s-network-traffic-here-s-what-it-sends--scd4z65od) · Hacker News · 2 upvotes · 0 comments - [New MacSync macOS Stealer Uses Signed App to Bypass Apple Gatekeeper](https://daily.dev/posts/new-macsync-macos-stealer-uses-signed-app-to-bypass-apple-gatekeeper-xfgu6c0kb) · The Hacker News · 2 upvotes · 0 comments - [MacSync Stealer malware bypasses macOS Gatekeeper security warnings](https://daily.dev/posts/macsync-stealer-malware-bypasses-macos-gatekeeper-security-warnings-rrvsdbo2x) · CSO Online · 0 upvotes · 0 comments --- Tags: [#privacy](https://daily.dev/tags/privacy), [#monitoring](https://daily.dev/tags/monitoring) [View this post on daily.dev](https://daily.dev/posts/why-does-mail-app-contact-icloud-when-sending-a-non-icloud-email--3l5ian2cx) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Why does Mail app contact iCloud when sending a non-iCloud email?","url":"https://daily.dev/posts/why-does-mail-app-contact-icloud-when-sending-a-non-icloud-email--3l5ian2cx","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/why-does-mail-app-contact-icloud-when-sending-a-non-icloud-email--3l5ian2cx"},"datePublished":"2026-08-03T16:52:00.018Z","dateModified":"2026-08-03T22:53:02.052Z","description":"When sending an email from a non-iCloud account in macOS Mail app, the app unexpectedly triggers connections to iCloud's gateway even when iCloud Mail is fully...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f4d48b9b6a921755f7e984f648023ac4?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f4d48b9b6a921755f7e984f648023ac4?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Hacker News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Hacker News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/hn","url":"https://daily.dev/sources/hn"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/why-does-mail-app-contact-icloud-when-sending-a-non-icloud-email--3l5ian2cx","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"privacy,monitoring","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Hacker News","item":"https://daily.dev/sources/hn"},{"@type":"ListItem","position":3,"name":"Why does Mail app contact iCloud when sending a non-iCloud email?"}]} ```