
I had to kill the Social Media Downloader in my iPhone shortcut. Here's what actually happened.
A few weeks ago I posted Grabio here. An iPhone Shortcut that let you download videos from Instagram, TikTok, YouTube, Facebook all from your share sheet.
People liked it. Then things got complicated.
When I tried to set up payments for the paid tier, every single processor rejected the product. Polar, Stripe, Lemon Squeezy, Paddle.
All of them. Same reason every time: Visa and Mastercard have brand-level policies against third-party content downloaders.
One feature. Every door closed.
I didn't know this when I built it. I'm a solo dev who taught himself iOS Shortcuts in the evenings. I hadn't read every acceptable use policy before shipping. That's on me.
I also sat with the creator side of it. Someone downloads their own content fine. But that's not what most people were using it for. The grey zone was real and it wasn't getting less grey.
So I removed it. Completely. From the server, from the Shortcut menu, from every page on the site.
If you came to Grabio specifically for that feature, I'm sorry. Cobalt.tools does it well and I'd point you there.
So what's next for Grabio?
25 file utilities, all running from the iOS share sheet. No app to install. No account. No tracking.
- Share a photo → compress to exact KB (yes, exact for forms, visa uploads, WhatsApp limits), HEIC to JPG, background removal via AI, strip EXIF location data, resize for socials, photo to PDF, decode QR.
- Share a PDF → compress via ghostscript, strip metadata, keep first 5 or 10 pages, delete first/last page.
- Share a webpage from Safari → save as clean PDF or full-page screenshot.
- Share text → generate a QR from it.
- Video → convert, compress, extract as ringtone.
- Live Photo → GIF that actually plays in WhatsApp.
25 total. Free tier is 5/day. That's enough for most people, permanently.
I also went open source after the last thread.
The full docs, privacy architecture, subprocessor list, and a runnable verifier CLI are at: https://github.com/adityaarsharma/grabio
The verifier (cd verify && node verify-privacy.js) mechanically checks 15+ claims against the live server no cookies, no third-party trackers, self-hosted Plausible, no telemetry SDKs, HSTS. If anything fails, it exits non-zero.
You don't have to trust me. The code does the assertion.
On billing: Pro is $3/month. Lifts the daily limit from 5 to 30.
The cap is just what lets me serve thousands of people on one rented server in Germany without it catching fire.
No email ever collected. iPhone checkout binds via device ID automatically.
Desktop checkout generates a QR you scan opens Safari, taps the shortcut, binds Pro to your phone.
No license codes. No account creation.
People in the last thread pushed hard on the permissions and fingerprinting concerns. They were right to. That feedback is why the verifier exists and why the source is public now.
The product is better because of that thread. Not in a vague way.
The code does different things now.
Grabio Website : https://grabio.adityaarsharma.com
RoutineHub: https://routinehub.co/shortcut/25430/
Full story on the blog: https://grabio.adityaarsharma.com/blog/grabio-launching-soon