Mirroring exposes everything on the source device

What it is

Mirror a phone onto the meeting-room television and the next SMS banner, incoming call, and home-screen folder after unlock are blown up for everyone in the room. Mirroring exposes the entire source: pixels are copied as-is, including notifications, lock UI, app switching, and authentication sheets. AirPlay of a film sends that one video. AirPlay mirroring sends the whole desktop. Both get called “put it on the TV”; the leak radius is not the same. This entry is the privacy radius of a whole-screen copy. It is not about which device holds the remote, and not about who keeps playing after the cable drops.

Why it happens

Mirroring means copying the source framebuffer. The OS has no default cut that says “this layer may mirror, the notification layer may not,” because a cut is a second compositing pipeline. Everything visible on the source becomes a shared event: banners, picture-in-picture, Control Center, an album reached by accident. The mental model is usually “I am casting this app”; the system is “I am casting this screen.” The mismatch is quiet at the start—the full screen is what others are meant to see. Minutes later a private notification arrives, and the leak is done. A meeting room, classroom, or living room turns “another of my screens” into “a room’s screen,” and the radius jumps.

Where it stops holding

Mirroring onto one’s own display or car stack with no bystanders is not a social leak, though it can still enter a dashcam or a screen recording. Managed devices can suppress notifications by policy while mirroring; a home TV often has no such policy. Sending a single window or a single app (window projection, in-app “cast this video only”) is not whole-screen mirroring and should not inherit the same warning. Focus modes that already kill banners shrink the notification surface, but they do not cover unlock, app switching, or authentication, which remain visible.

Applying it

• Before whole-screen mirroring, state that the TV will show everything that appears on this device, including notifications and calls, and offer “pause banners while mirroring,” defaulting toward on when a shared external screen is detected.
• Split “mirror the whole screen” and “cast the current film / current window” into two actions; do not use one “cast” button that decides the pipe afterwards.
• During a mirror, give upcoming full-screen authentication, photos, and messaging a path to defer or to finish locally on the source.
• Verify by triggering an SMS banner, an incoming call, and an app switch while mirrored. Every private item that appears on the second screen should have been foreseeable from the start copy or the in-progress controls; otherwise drop that layer from the default mirror or intercept it before it appears.

Related

• Within the group: K8.04.2 Casting must separate the content stream from the control stream · K8.04.3 After a drop, it must be clear which device owns the state
• Adjacent: K5.05 Co-viewing · K7.10 Session end and privacy clearing · K1.06 Widgets and lock-screen entry points
• Search terms: screen mirroring · AirPlay · notification leakage