Tailscale or home Wi-Fi for a private Mac-to-iPhone AI connection?

I’m Joe, creator of JoeBro and JoeBro Mobile. The phone app connects to a listener on the JoeBro host. The connection can use the local Wi-Fi network or Tailscale; each choice changes how the phone reaches the host, not where the model runs.

Staying on the home network

The This Wi-Fi network only option is for home use. iOS asks for Local Network access the first time; if you deny it, LAN connections can fail silently. The setup avoids requiring a remote network path, but anyone on that same Wi-Fi who obtains the pairing token may be able to reach the listener. A shared home network is still a network boundary worth considering.

Connecting through Tailscale

The Mac Mobile settings also offer Tailscale only and Wi-Fi and Tailscale. JoeBro's docs recommend Tailscale for reaching the Mac away from home; in Tailscale-only mode the listener port is not visible on Wi-Fi. The phone listener requires its token on every request. Combining both modes can be useful if you want a local route at home and a Tailscale route when away, but it exposes more than one path to manage.

Do not port-forward the listener to the public internet. The token helps authenticate requests; it is not a reason to publish the service broadly. Pair the intended device, keep the token private, and rotate it in Mobile settings if it may have been exposed. The phone app stores the token in the iOS Keychain.

The always-on limitation

In the public 1.3 release, the Python backend is bundled into the Mac app, so the Mac must be open and awake for the phone connection to work. I personally run the Python and SQLite backend headless on a Raspberry Pi and connect my Mac and iPhone over Tailscale. That avoids the sleeping-Mac issue in my own setup, but standalone Pi hosting is not an officially documented mode and there is no Pi or Docker guide. The documented path remains a running Mac.

This network decision is separate from model privacy. Ollama may be local or elsewhere on your network; a hosted API receives prompts at its provider. See the project docs in JoeBro and JoeBro Mobile before pairing.