Blog

The Boring Privacy Win: A Local Model Has No Reason to Phone Home

Here's the least exciting sentence in this entire blog, and I think it's the most important one: a local model has no reason to want your data.

Privacy debates are usually moral. Companies promise to be good stewards. They publish policies. They hire ethicists. And all of that is fine, but it's fragile, because policies change and stewards get replaced and ethicists get laid off in the round that also kills the privacy team. Every time you hear "we take your privacy seriously," part of the sentence is a promise about the future, and the future is run by people you've never met.

The structural argument is different. It doesn't ask anyone to be good. It asks a much simpler question: who benefits from your data, and what would they have to do to get it?

The cloud has an appetite

Here's the uncomfortable truth about cloud writing tools. Your sentences aren't just input to them. They're the product. The text you type into a cloud assistant is what makes the service better, what trains the model, what gets analyzed for trends, what gets stored against your account. Even a genuinely ethical company with a genuinely good policy is sitting on a mountain of your words, and that mountain is an asset. It has value. And anything with value eventually attracts the question of how to use it.

I'm not accusing anyone of anything. I'm describing the shape of the system. When your words live on someone else's server, someone else owns the decision about what happens to them, and your only protection is their continued goodwill, expressed in a policy they can change with a blog post.

The local model has no appetite

Now look at the other side. WriteAmp runs its model on your Mac. To make a suggestion, the model reads the sentence in front of the cursor, in memory, on your machine, and then it's done. The words aren't an asset to WriteAmp, because WriteAmp never receives them. They don't travel anywhere. They don't accumulate in a database I control. They exist in exactly one place, the place you typed them, plus whatever your own backups do.

This isn't because I'm more ethical than a cloud company. It's because the architecture doesn't give me the option to be unethical. I literally can't read your sentences, because they never pass through anything I operate. There's no server to subpoena, no database to breach, no training run to quietly opt you into. The data doesn't exist in a form anyone but you can touch.

That's the boring privacy win, and it's the only kind of privacy win that lasts. It doesn't depend on my character, my policy, or my continued existence. It depends on physics, or the software equivalent of physics: the words never leave, so there's nothing to protect.

The part I have to be honest about

Let me be precise, because the structural argument has edges, and I've written about them before rather than hide them. A local model isn't the same as a hermit. WriteAmp does use the network for three specific jobs: downloading the model, checking for updates, and verifying the license. I published the full ledger of those three calls, and none of them carry your writing.

And a local model doesn't protect you from a compromised Mac. If malware is running as you, it can read what you type before the app ever sees it. No architecture fixes a machine that's already owned. What local processing does is remove the cloud as a target: there's no distant server full of everyone's sentences waiting to be breached.

Why this is the whole product

This isn't a side feature of WriteAmp. It's the reason the product exists, and it's the reason it's priced the way it is. A tool with no server has no monthly cost, so it can be bought once instead of rented. A tool with no server has no reason to meter your typing, so it can be quiet when it's not sure instead of eager to justify a subscription. The privacy story and the business model are the same story. Remove the server, and you remove the appetite for your data, the reason for the subscription, and the incentive to keep you hooked.

The people who built the cloud tools aren't villains. They built the architecture that made sense for their business. But you're allowed to notice that the architecture that makes sense for their business is the one where your words are the raw material, and to choose the tool where they're just input.

The trial is free for 30 days if you want to feel the difference, and the privacy page has the written version of the architecture. Type a draft about something you wouldn't want read, turn off your Wi-Fi, and watch the suggestions keep coming. That's the structural argument, running on your desk.

---

On macOS 26+ Macs, Apple Intelligence mode stays free even after the trial ends — you always keep a working path to suggestions.

Written by Amit Ashwini, who builds WriteAmp and runs its marketing. More: why the Tab key beats the chat box · mini, midi, and max compared · benchmark methodology.