remindd
executablemacOS20.1 MBx86_64, arm64
System location services daemon — manages GPS, Wi-Fi, and Bluetooth positioning
Provides device location through GPS, Wi-Fi scanning, and Bluetooth beacons without user prompts for system bundles. Accesses IOKit user clients for hardware control and maintains persistent location state across sessions. Syncs location data with iCloud and submits diagnostic telemetry to Apple. Exposes 47 XPC services for system components and applications to query position, configure location behavior, and access address book data. Performs cryptographic operations and manages network configuration for location-based services.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 20.1 MB
- UUID
- 54C84BBF-E723-352D-B002-34B256189094
- Analyzed
- 2026-04-09T10:01:01Z
- CDHash
- 1afb39facd2012f2da1078f339311cde8786a7bba7b2362399c6ef85236a57d5
Capabilities
LocationAccess location as a system bundle (no user prompt)
com.apple.locationd.effective_bundle[object Object]LocationLocation services access
/System/Library/Frameworks/CoreLocation.framework/Versions/A/CoreLocationLocationLocation services access
/System/Library/Frameworks/_LocationEssentials.framework/Versions/A/_LocationEssentialsNetworkNetwork configuration and reachability
/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfigurationStoragePrivate storage area access
com.apple.private.security.storage.MobileAssetGenerativeModels[object Object]StorageException: access additional file paths
com.apple.security.exception.files.absolute-path.read-only/usr/libexec/private/var/containers/Shared/SystemGroup/systemgroup.com.apple.lsd.iconscache//private/var/MobileAsset/AssetsV2/com_apple_MobileAsset_UAF_Siri_Understanding//private/var/MobileAsset/AssetsV2/locks/com.apple.UnifiedAssetFramework//private/var/MobileAsset/AssetsV2/com_apple_MobileAsset_UAF_FM_GenerativeModels/purpose_auto//private/var/MobileAsset/AssetsV2/com_apple_MobileAsset_UAF_FM_Overrides/purpose_auto//private/var/MobileAsset/PreinstalledAssetsV2/InstallWithOs/com_apple_MobileAsset_UAF_FM_GenerativeModels//private/var/MobileAsset/PreinstalledAssetsV2/InstallWithOs/com_apple_MobileAsset_UAF_FM_Overrides//System/Library/PreinstalledAssetsV2/RequiredByOs/com_apple_MobileAsset_UAF_FM_GenerativeModels//System/Library/PreinstalledAssetsV2/RequiredByOs/com_apple_MobileAsset_UAF_FM_Overrides//private/var/mobile/Library/com.apple.modelcatalog/sideload//private/var/db/assetsubscriptiond//private/var/db/com.apple.naturallanguaged/
StorageException: access additional file paths
com.apple.security.exception.files.absolute-path.read-write<array/>StorageException: access additional file paths
com.apple.security.exception.files.home-relative-path.read-onlyStorageException: access additional file paths
com.apple.security.exception.files.home-relative-path.read-writeStorageAddress book access
/System/Library/Frameworks/Contacts.framework/Versions/A/ContactsHardwareException: access additional IOKit user clients
com.apple.security.exception.iokit-user-client-classRootDomainUserClientIOSurfaceAcceleratorClientAppleKeyStoreUserClientIOSurfaceRootUserClientAGXDeviceUserClientIOGPUDeviceUserClientIOMobileFramebufferUserClientAGXCommandQueueAGXDeviceAGXDeviceUserClientAGXSharedUserClientIOAccelContextIOAccelDeviceIOAccelSharedUserClientIOAccelSubmitter2IOAccelContext2IOAccelDevice2IOAccelSharedUserClient2IOServiceOpenIOServiceOpenClientH11ANEInDirectPathClient
IpcRestricted application group access
com.apple.private.security.restricted-application-groupsIpcShared application group container access
com.apple.security.application-groupsIpcException: access additional Mach services
com.apple.security.exception.mach-lookup.global-namecom.apple.iconservicescom.apple.coreduetd.knowledgecom.apple.siri-distributed-evaluationcom.apple.suggestd.reminderscom.apple.reminddcom.apple.clouddcom.apple.apsdcom.apple.usernotifications.usernotificationservicecom.apple.analyticsdcom.apple.spotlight.IndexAgentcom.apple.spotlight.IndexDelegateAgentcom.apple.managedconfiguration.profiledcom.apple.frontboard.systemappservicescom.apple.appconduitd.device-connectioncom.apple.contactsdcom.apple.routined.registrationcom.apple.mobileactivationdcom.apple.chronoservicescom.apple.cache_deletecom.apple.cache_delete.publiccom.apple.SBUserNotificationcom.apple.triald.namespace-managementcom.apple.siri.uaf.servicecom.apple.siri.uaf.subscription.servicecom.apple.kvsdcom.apple.assistant.cdmcom.apple.TextInput.rdtcom.apple.intelligenceplatform.Viewcom.apple.mobileasset.autoassetcom.apple.mobileassetd.v2com.apple.biome.access.usercom.apple.alarmkitservicescom.apple.appleneuralenginecom.apple.usernotifications.listenercom.apple.mobile.keybagd.xpccom.apple.mobile.keybagd.UserManager.xpccom.apple.mobile.usermanagerd.xpccom.apple.appprotectiond.guardcom.apple.appprotectiond.readcom.apple.feedbackd.xpccom.apple.modelcatalog.catalogcom.apple.mobileasset.autoassetcom.apple.mobileassetd.v2com.apple.modelmanagercom.apple.generativeexperiences.availabilityService
AnalyticsApple unified analytics submission
/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalyticsSecurityCryptographic operations
/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKitFrameworks83
DistributedEvaluationBehaviorMinerCoreRoutineCoreNLPMobileAssetNaturalLanguageCoreMLCDMFoundationReminderKitInternaliCalendarCoreAnalyticsFrontBoardServicesCoreFoundationCDDataAccess(weak)CDDataAccess(weak)CDDataAccessExpress(weak)ApplePushServiceCoreServicesCoreSpotlightFoundationReminderKitSystemConfigurationlibobjc.A.dyliblibSystem.B.dylibAccountsAppIntentsAppKitCloudKitCombineContactsCoreDataCoreGraphicsCoreLocationCryptoKitIntentsUserNotifications_LocationEssentialsAppleAccountCloudKitCodeCoreSuggestionsGRDBInternalGenerativeFunctionsGenerativeFunctionsFoundationGenerativeModelsGenerativeModelsFoundationIntelligencePlatformInternalSwiftProtobufModelCatalogPromptKitTCCTokenGenerationTokenGenerationCoreUnifiedAssetFrameworklibsqlite3.dyliblibswiftAVFoundation.dylib(weak)libswiftAccelerate.dylib(weak)libswiftCompression.dylib(weak)libswiftCore.dyliblibswiftCoreAudio.dylib(weak)libswiftCoreFoundation.dylib(weak)libswiftCoreImage.dylib(weak)libswiftCoreLocation.dylib(weak)libswiftCoreMIDI.dylib(weak)libswiftCoreMedia.dylib(weak)libswiftDispatch.dyliblibswiftIOKit.dylib(weak)libswiftIntents.dyliblibswiftMLCompute.dylib(weak)libswiftMetal.dylib(weak)libswiftNaturalLanguage.dyliblibswiftOSLog.dylib(weak)libswiftObjectiveC.dyliblibswiftQuartzCore.dylib(weak)libswiftRegexBuilder.dyliblibswiftSpatial.dylib(weak)libswiftUniformTypeIdentifiers.dyliblibswiftXPC.dylib(weak)libswift_Builtin_float.dylib(weak)libswift_Concurrency.dyliblibswift_DarwinFoundation1.dyliblibswift_StringProcessing.dyliblibswiftos.dyliblibswiftsimd.dylib(weak)
Entitlements97
com.apple.security.exception.files.absolute-path.read-only
/usr/libexec/private/var/containers/Shared/SystemGroup/systemgroup.com.apple.lsd.iconscache//private/var/MobileAsset/AssetsV2/com_apple_MobileAsset_UAF_Siri_Understanding//private/var/MobileAsset/AssetsV2/locks/com.apple.UnifiedAssetFramework//private/var/MobileAsset/AssetsV2/com_apple_MobileAsset_UAF_FM_GenerativeModels/purpose_auto//private/var/MobileAsset/AssetsV2/com_apple_MobileAsset_UAF_FM_Overrides/purpose_auto//private/var/MobileAsset/PreinstalledAssetsV2/InstallWithOs/com_apple_MobileAsset_UAF_FM_GenerativeModels//private/var/MobileAsset/PreinstalledAssetsV2/InstallWithOs/com_apple_MobileAsset_UAF_FM_Overrides//System/Library/PreinstalledAssetsV2/RequiredByOs/com_apple_MobileAsset_UAF_FM_GenerativeModels//System/Library/PreinstalledAssetsV2/RequiredByOs/com_apple_MobileAsset_UAF_FM_Overrides//private/var/mobile/Library/com.apple.modelcatalog/sideload//private/var/db/assetsubscriptiond//private/var/db/com.apple.naturallanguaged/
com.apple.security.exception.iokit-user-client-class
RootDomainUserClientIOSurfaceAcceleratorClientAppleKeyStoreUserClientIOSurfaceRootUserClientAGXDeviceUserClientIOGPUDeviceUserClientIOMobileFramebufferUserClientAGXCommandQueueAGXDeviceAGXDeviceUserClientAGXSharedUserClientIOAccelContextIOAccelDeviceIOAccelSharedUserClientIOAccelSubmitter2IOAccelContext2IOAccelDevice2IOAccelSharedUserClient2IOServiceOpenIOServiceOpenClientH11ANEInDirectPathClient
com.apple.security.exception.mach-lookup.global-name
com.apple.iconservicescom.apple.coreduetd.knowledgecom.apple.siri-distributed-evaluationcom.apple.suggestd.reminderscom.apple.reminddcom.apple.clouddcom.apple.apsdcom.apple.usernotifications.usernotificationservicecom.apple.analyticsdcom.apple.spotlight.IndexAgentcom.apple.spotlight.IndexDelegateAgentcom.apple.managedconfiguration.profiledcom.apple.frontboard.systemappservicescom.apple.appconduitd.device-connectioncom.apple.contactsdcom.apple.routined.registrationcom.apple.mobileactivationdcom.apple.chronoservicescom.apple.cache_deletecom.apple.cache_delete.publiccom.apple.SBUserNotificationcom.apple.triald.namespace-managementcom.apple.siri.uaf.servicecom.apple.siri.uaf.subscription.servicecom.apple.kvsdcom.apple.assistant.cdmcom.apple.TextInput.rdtcom.apple.intelligenceplatform.Viewcom.apple.mobileasset.autoassetcom.apple.mobileassetd.v2com.apple.biome.access.usercom.apple.alarmkitservicescom.apple.appleneuralenginecom.apple.usernotifications.listenercom.apple.mobile.keybagd.xpccom.apple.mobile.keybagd.UserManager.xpccom.apple.mobile.usermanagerd.xpccom.apple.appprotectiond.guardcom.apple.appprotectiond.readcom.apple.feedbackd.xpccom.apple.modelcatalog.catalogcom.apple.mobileasset.autoassetcom.apple.mobileassetd.v2com.apple.modelmanagercom.apple.generativeexperiences.availabilityService
com.apple.security.exception.shared-preference.read-only
com.apple.UIKitcom.apple.nanobuddycom.apple.persistentconnectioncom.apple.purplebuddycom.apple.DataAccess.BehaviorOptionscom.apple.UnifiedAssetFrameworkcom.apple.CloudSubscriptionFeatures.datadetectorscom.apple.UnifiedAssetFrameworkcom.apple.modelcatalog.ajaxcom.apple.GenerativeFunctions.GenerativeFunctionsInstrumentationkCFPreferencesAnyApplicationcom.apple.gms.availability
Interesting Strings
Bundle IDs(629)
File Paths(94)
#/private/var/db/assetsubscriptiond/%@%@.sqlite%@--%@.sqlite+/private/var/db/com.apple.naturallanguaged/0?/AppleInternal/Library/BuildRoots/4~B_xTugCasnREMc1x41izVUb0S2w7vq0dKEdfdkw/Library/Caches/com.apple.xbs/Sources/ReminderKit_Support/Common/CoreData/Generated/REMCDReminder+REMCDDueDateDeltaAlerts.swift
telemetry(157)
URLs & Endpoints(6)
$http://crl.apple.com/codesigning.crl0%http://www.apple.com/appleca/root.crl0<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><string>com.apple.compilers.llvm.clang.1_0</string>https://configuration.apple.com/configurations/internetservices/cloudkit/reminders-1.0.plist
Network Surfaceentitled
Networking Frameworks
Endpoints(23)
Hostnamelist.name
Ipv60:8:16
Hostnameconfiguration.apple.com
HostnameREMCDObject.entity.name
HostnamedestinationEntity.name
HostnameNSManagedObject.entity.name
HostnameREMCDTemplate.name
Hostnamestorage.name
HostnamecdTemplate.name
Hostnameinvocation.name
HostnamecdEntity.name
Hostnamewww.apple.com
Hostnamemacosx26.1.internal
Hostnamecrl.apple.com
API Usage
DNA Capability Vector
Location
3
Keychain
0
Network
3
Storage
6
Hardware
1
IPC
3
Analytics
2
Security
1
System
0
Behavioral Profile
URL Endpoints
6
Telemetry Strings
157
File Paths
94
Bundle IDs
629
IOKit Constants
0
Library Functions
1
Structural HashesSHA-256
Static Libraries1 / 22091 functions identified
Identified Libraries
Functions(22091)
0x1000032a8-[RDFeatureFlagsObjCWrapper initWithRawValue:]
0x100003324-[RDFeatureFlagsObjCWrapper rawValue]
0x10000332c-[RDFeatureFlagsObjCWrapper .cxx_destruct]
0x100003338sub_100003338
0x100003378-[RDStoreControllerMigrator_RemoveOrphanedLists migrateStoreIfNeeded:metadata:]
0x100003434-[RDStoreControllerMigrator_RemoveOrphanedLists migrateStore:]
0x1000036ecsub_1000036ec
0x1000036fcsub_1000036fc
0x100003704sub_100003704
0x100003924sub_100003924
0x100003974sub_100003974
0x1000039bcsub_1000039bc
0x100003b44sub_100003b44
0x100003c3csub_100003c3c
0x100003c78sub_100003c78
0x100003cb4sub_100003cb4
0x100003cc0sub_100003cc0
0x100003cd0+[RDPaths locationBundleURL]
0x100003d14sub_100003d14
0x100003ebc+[RDPaths defaultApplicationDocumentsURL]
Imports3846 symbols from 56 dylibs
Exports1
_mh_execute_header0x0