Some users find that the Mac firewall never learns that SpiderOak ONE or Groups is a trusted application. Upon launching the application, the firewall asks "Do you want the application to accept incoming connections?". Choosing Allow is the correct choice, yet the preference is not learned and the question is asked again every time the application is launched.
To resolve this problem, in the lower right hand corner of the SpiderOak ONE or Groups desktop application, click on Preferences and open the Network tab. If Allow LAN-Sync is enabled, disable it and press Save. In the Mac menu bar, click on SpiderOak's icon and select Quit. In the Mac Launchpad, launch SpiderOak again. The firewall might ask you one last time if you want the application to accept incoming connections. Choose Allow as before, but this time the firewall will remember the setting and you will not be asked again.