Dictation App Permissions: Mic, Full Access, Clipboard

A dictation app needs two kinds of access. The microphone lets it hear you. The second is the permission that lets it put the finished words where your cursor is, and that one can reach well beyond your voice. On an iPhone keyboard it is Allow Full Access. On a Mac it is Accessibility. On Windows it is input simulation, which Windows limits by integrity level. On any system the clipboard can carry your text to other apps. Grant the microphone when you dictate, grant the insertion permission only when the app needs it, and check both in your system's privacy settings.

This guide explains what each permission technically allows, according to Apple, Google and Microsoft, and how to review or revoke them. For the setup steps, see our guides to dictation on iPhone and dictation on a Mac. For the wider rules on where your voice is processed, start with our overview of voice privacy.

The microphone permission is the obvious one; the text insertion permission is the powerful one

The microphone permission controls whether an app can record your voice. On a Mac, Apple says you can decide which apps are allowed to use the microphone ¹. On Windows 11, apps can use the microphone only when Microphone access is turned on under Privacy & security ². Most people expect these switches, and they are easy to see in settings.

The insertion permission is different. It decides whether the app can act inside other apps: type into Notes, a browser or a chat window, or read what you have copied. Each platform gates this in its own way, so the table below sets the three main routes side by side.

The table shows why the second permission deserves more attention. The microphone can only record. The insertion route can write, read or send text on your behalf.

Full access lets a phone keyboard reach the network, which is why iOS asks

On iPhone, Allow Full Access is the switch that gives a third-party keyboard network access. Apple says users must explicitly turn on the Allow Full Access switch for a keyboard in Settings before the keyboard can have open access ³. Until then, the keyboard runs in a sandbox. Apple's developer documentation says that sandbox's default configuration disallows network access ⁴. The setting belongs to each keyboard, so turning it on for one does not change the others. See the Allow Full Access glossary entry and the third-party keyboard definition for the terms.

Citizen Lab, an independent research lab, describes the same boundary. In its 2024 report it says that without this permission, third-party keyboards cannot transmit network data ⁵. This matters for dictation because a keyboard that sends your speech to a cloud engine, or downloads a model, needs a network connection. A keyboard that works fully on the phone may not need the switch at all.

Apple's warning is the reason the switch exists. As TechCrunch reported in 2014, Apple's warning says that if you enable Full Access, developers are permitted to access, collect and transmit the data you type ⁶. The wording is about permission. It does not say that every keyboard with the switch on collects your text.

Keyboard studies flagged most of the apps they tested

Two studies show how often the concern is real. They measure different things, so read them separately.

A 2015 peer-reviewed study analyzed the security behaviors of 139 keyboard apps on Google Play ⁷. It found that 84 of them could be misused as malicious keyloggers ⁸, which is 60 percent ⁹. That is a measure of what the apps could do, not of what they sent.

Citizen Lab's 2024 report tested keyboard apps from nine vendors, including Baidu, Huawei and Tencent ¹⁰. It found critical vulnerabilities in the apps of eight of those nine vendors ¹¹, which is 89 percent ¹². Those flaws let a network eavesdropper read keystrokes while they travel, which is a different threat from the vendor reading your text.

The two numbers are not comparable in a strict sense. One counts apps and the other counts vendors, and neither sample is a random sample of all keyboards. Read them as evidence that a third-party keyboard with network access deserves a check, not as a rating of any keyboard.

Citizen Lab also recommends that Android sandbox keyboard apps by default, as iOS does ¹³. It advises at-risk users to switch from a cloud-based keyboard app to one that operates entirely on-device ¹⁴. For more on that choice, see our guide to on-device speech recognition and the question on whether a third-party keyboard can see what you type.

On iPhone, a keyboard's voice typing runs inside the keyboard's own app

Keyboards on iPhone do not get the microphone themselves. In 2017, TechCrunch explained that Apple does not let third-party keyboards access the microphone, so Gboard's voice typing runs inside the Gboard app, which is allowed to use it ¹⁵. That report is nearly a decade old, so check the current behavior of any keyboard you use. The practical point stands: a keyboard that offers dictation may need both the app's microphone access and the network switch.

Accessibility access on a Mac lets an app read and control other apps

On a Mac, the Accessibility permission is the equivalent of Full Access for controlling other apps. Apple says that when a third-party app tries to access and control a Mac through accessibility features, the user receives an alert and must specifically grant the app access in Privacy & Security settings ¹⁶. Nothing is allowed by default. See the macOS Accessibility permission entry for the term.

The reason a dictation app asks is simple. To type into the app you have in front, it has to send keystrokes or text to that app. Accessibility is the channel macOS provides for that job. The same channel is used by assistive tools, and that is why the permission is powerful: a granted app can act across the apps on your Mac, not only in one window.

Apple's steps for reviewing it start from the Apple menu. To review app permissions, you choose Apple menu, System Settings, click Privacy & Security in the sidebar, then click Accessibility, and turn permission on or off for any app in the list ¹⁷. The question on why a dictation app needs Accessibility access on a Mac walks through the reasoning, and the Mac dictation privacy guide covers what Apple's own dictation keeps.

Paste-based insertion leaves your words on the clipboard, where other apps can read them

Some dictation apps avoid Accessibility entirely. They copy the finished text to the clipboard and send a paste command, so you or the app presses Command-V or Control-V. That trades one permission for another, because the clipboard is a shared place that other apps can try to read. How safe it is depends on the operating system.

On iPhone, Apple's 2022 developer session explained that from iOS 16 the system confirms intent before one app reads pasteboard items written by another app ¹⁸. Apple's session describes the design intent, so the exact prompt wording and when it appears can change between versions.

On Android, Google's documentation shows that protection has been added over time. Android versions older than Android 10 let background applications access foreground app clipboard information ¹⁹. From Android 12, a toast appears each time an app accesses clipboard data and pastes it, which Google says makes attacks more difficult to go unnoticed ²⁰. A phone on an older Android version is therefore a weaker place to keep dictated text on the clipboard.

On Windows, the input route is different. The SendInput function is subject to User Interface Privilege Isolation, so applications can inject input only into applications at an equal or lesser integrity level ²¹. This does not stop a dictation app from typing into an ordinary window, but it does mean that text can fail to reach a window that runs with elevated rights. Windows does not list this as a separate privacy switch in the sources we checked.

The table lists the protections the sources describe. The sources did not settle whether macOS shows a clipboard prompt for every app, so check Apple's current developer documentation before relying on one.

Clipboard history and sync can copy dictated text to other devices

Clipboard history and sync are where paste-based dictation can leave your device. On Windows, Microsoft says you can sync your clipboard history to the cloud and paste items from it ²². Sync is controlled in Settings under System, then Clipboard, and the toggle is labeled Clipboard history across your devices. Microsoft also says the feature is tied to your Microsoft account or your work account, so the same login must be used on every device ²³. If you dictate on a shared machine, check that sync is off.

On Apple devices, Universal Clipboard copies between your devices. Apple says it needs both devices to be signed in to the same Apple Account ²⁴, and it says that copied content is available on the Clipboard for a short time, so you should paste it soon after copying ²⁵. Apple describes it as best for small selections of text or copied images between devices ²⁶. The rule of thumb is simple: if you do not want your dictated text to appear on another device, turn Universal Clipboard off in the settings for the devices you use.

Recording indicators show when any app is using the microphone

The microphone permission is only half the check. Each system shows a visible sign when the microphone is in use, and it is worth knowing where to look.

On iPhone, Apple says that with iOS 14 or later, an orange dot, an orange square, or a green dot indicates when the microphone or camera is being used by an app ²⁷. The orange indicator means the microphone is in use. It appears as a square when Differentiate Without Color is turned on in Settings, under Accessibility, then Display & Text Size ²⁸. A green indicator means the camera alone, or the camera and microphone together, is in use.

On a Mac, the Recording Indicator light in Control Center shows when the microphone is in use or has been used recently ²⁹. The "used recently" part matters. A light that is off now does not prove that no app recorded earlier.

On Windows, the device-level check comes first. Apps can use the microphone only when Microphone access is turned on under Privacy & security, App permissions, Microphone ². On Windows 11, you must also turn on Let apps access your microphone ³⁰. Desktop apps have a separate setting, Let desktop apps access your microphone, which must be turned on for them to use the microphone ³¹. The question on how to tell if an app is using your microphone covers the indicators in more detail.

Audit and revoke permissions in each operating system's privacy settings

Review your permissions on a schedule, and every time you install a new dictation app. The steps below use the menu names from the sources we checked. Platform screens change between releases, so if a name differs on your version, look for the same setting nearby.

1. On iPhone, open Settings, tap General, tap Keyboard, tap Keyboards, and then tap the keyboard. Apple's steps for adding and changing keyboards follow the same path ³². Turn off Allow Full Access for any keyboard you no longer use for speech.
2. On a Mac, choose Apple menu > System Settings, click Privacy & Security, and then open Accessibility. Turn off access for any app you no longer trust to control your Mac ¹⁷. Then open Microphone and review the list of apps ¹.
3. On Windows 11, open Start, Settings, Privacy & security, then Microphone. Check the device-level Microphone access setting, the Let apps access your microphone switch, and the Let desktop apps access your microphone switch ³⁰.
4. On Windows clipboard history, open Settings, System, Clipboard. Turn off the sync toggle if you do not want copied items on other devices.
5. On Android, the sources we checked do not give a single settings path for keyboard network access, so check the keyboard app's own settings and the phone's app permissions for the microphone. Prefer an on-device keyboard for sensitive speech, as Citizen Lab advises ¹⁴.

Revoking a permission stops future access. To ask what an app has already received or stored, use its privacy policy and data controls. The question on whether apps can read your clipboard covers the clipboard rules in short form.

How to decide which permissions a dictation app needs

Use three questions. Does the app need the microphone to hear you? If yes, grant it. Does it need to type into other apps? If it uses a keyboard, grant Full Access only if the keyboard must reach the network. If it uses Accessibility on a Mac, grant that only to an app you trust. Does it paste through the clipboard? Then check the sync and history settings on each device.

We make Yap, a dictation app for Mac and Windows that also runs on phones. Check its permission list against these same questions, as you would any app, and check the other apps you consider with the same three questions. A good dictation app should explain in its settings or privacy policy why it needs each permission. If it cannot, that is a reason to look elsewhere.

For the full picture of where your voice is processed, read our guide on whether voice to text is safe, the guide on whether dictation apps train AI on your voice, and the guide to voice data retention. For the Windows side, see our Windows dictation privacy guide.