Local media access

Search results stay within the device and the host app’s authorized Photos access.

Resolve references locally#

Use the local asset references returned by search() with the host app’s Photos access. Check that an asset is still available before rendering or using it; permission and library changes can invalidate earlier results.

Keep the retrieval boundary local#

• Original photo and video pixels stay local to the media workflow.
• Local asset identifiers, the semantic/media index, and private image-level representations remain on the device.
• Do not forward local Search results or raw image-level metadata as context-service inputs.
• Rollup’s backend does not provide photo downloads, remote library browsing, or arbitrary individual-media retrieval.

Respect current access#

Limited Photos access limits both indexing and Search. On revocation or disconnect, stop local retrieval and discard cached results. Search does not grant permission to upload, share, or publish media; any such host-app workflow needs its own user authorization.