Revoke One Apps Access to Connected Apple Data
Revoking one app's access in Figment ends that app's grant immediately. Your Apple connection stays active, and every other app's grant continues unchanged. You do not need to disconnect your Apple account or repeat the connection setup.
What a Figment grant is
When a developer app connects to your Apple data through Figment, it receives its own scoped grant. That grant defines exactly which services the app can reach—iMessage, Calendar, Contacts, and so on—and which operations are permitted. Read and send permissions are separate; a selected service may require its own approval.
Each app holds its own independent grant. One app can have read access to your calendar while another holds a narrower permission for iMessage history. None of them share a grant, and none depend on the others.
This independence is what makes targeted revocation useful. Revoking one grant ends one app's access. The underlying Apple connection and every other app's grant are untouched.
Revoke or disconnect: use this checklist first
Before acting, decide which scope fits your situation.
| What you want to stop | Revoke one grant | Disconnect the connection |
|---|---|---|
| This app's access to your Apple data | Yes | Yes |
| Other apps' grants | No — they continue | Yes — all stop |
| All queued operations across every app | No | Yes — all stop |
| The Apple connection itself | Stays active | Stops |
Revoke one grant when you want to end a specific app's access and leave everything else running.
Disconnect the connection when you want to end every app's access at once, or you are decommissioning the connection and not reconnecting.
Do both Figment revoke and Apple-side revoke when the app had access to iCloud Mail, Calendar, or Contacts—Apple's own authorization for those three services is a separate layer. The step is in the section below.
Revoke one app's Figment grant
- Sign in at figment.so/apple-connect/account.
- Find the app in your active grant list.
- Select Revoke access for that app.
The grant status changes to revoked. The app's access to your Apple data ends, and the access token Figment issued for that grant can no longer be used or refreshed.
The developer app never held your Apple password—it held a Figment access token scoped to the permissions you approved. Revoking the grant invalidates that token. If the app attempts to call the API or refresh the token afterward, the request is rejected.
Revoking stops future authorization and halts any queued operations for that grant. It does not recall messages already delivered, and it does not erase copies of data the app received before the revoke. If you later want to restore access, the app must go through the authorization flow again and you must approve it.
Also revoke at Apple's end for Mail, Calendar, and Contacts
Figment's grant controls access through Figment. For iCloud Mail, Calendar, and Contacts, apps may also hold Apple's own native authorization—a distinct layer that exists regardless of the Figment grant.
Revoking the Figment grant alone does not remove Apple's authorization. Remove it separately.
Steps from Apple Support HT121539:
- Sign in to account.apple.com.
- Go to Sign-In and Security, then select Account Data Sharing.
- Find the app and click Remove access.
After this step, the app loses access to iCloud Mail, Calendar, and Contacts until you authorize it again. If you have made changes to your email address, aliases, or account full name in iCloud Mail, those changes will appear in the app after the next time you authorize it. (Apple Support)
If the app had previously used an app-specific password for Mail, Calendar, or Contacts access, revoke that password too. App-specific passwords are reusable credentials you generate for a specific app; revoking the data-sharing authorization does not automatically invalidate them. Revoke app-specific passwords at account.apple.com under Sign-In and Security → App-Specific Passwords.
Do these Apple-side steps whenever you revoke a Figment grant for an app that had access to any of those three services.
What changes after the revoke
The connection itself stays in whatever state it held before—ready, syncing, or otherwise. Services used by other apps continue operating. Nothing about your Apple account changes.
If you want to end every app's access at once, disconnect the Apple connection rather than revoking individual grants. Disconnecting stops every grant and every queued operation tied to that connection. For reconnection steps and Mac permission requirements, see Grant the Mac Permissions Your Connector Needs and OAuth for iCloud: Connect Apple Data to Your App.
To review or manage active grants, sign in at figment.so/apple-connect/account. Ready to start a fresh connection? Connect Apple Account.
