01
I ask for the smallest permission that does the job. Halo needs Accessibility to read the names of your status items, so that is the one thing it asks for. Eclipse asks for nothing at launch, then asks per feature. Neither has ever requested Screen Recording, because I do not want the ability to read your screen and you should not have to trust me with it.
02
Everything stays on the machine. No analytics SDK, no crash pings, no account. Your clipboard history, notes, scans and layouts are files in your own Library folder. The only requests that leave are ones you can name: weather from Open-Meteo, and whatever payment API you pasted a read-only key into.
03
I charge once. A utility that lives in your menu bar should not bill you monthly, so you buy a version and keep it, and updates are free for the window each app states. If it does not work on your Mac, tell me inside 14 days and I refund it without asking why.