Apple Tightens macOS Full Disk Access Controls as AI Agents Raise Privacy Risks

Apple did not say when the update will roll out or what exactly will change. The company also did not immediately respond to requests for comment from TechCrunch and The Verge.

Full Disk Access was designed to allow backup apps to function properly on the Mac, but it largely sidesteps macOS privacy controls, Apple said. With the setting enabled, an app can access files, mail, messages, and even browsing history. Apple warned that for communication apps, the permission can also compromise the privacy of the people users communicate with. “As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially,” Apple wrote. “We are committed to ensuring users clearly understand these risks before granting such access, so they can make informed decisions about their own data and privacy.”

The announcement follows a report by Inc. columnist Jason Aten, who claimed that Meta’s Muse app on Mac knew the contents of his private messages even though he said he had not given the AI agent permission. Meta disputed the account. Meta spokesperson Andy Stone said access to Messages is “entirely opt-in” and that users must enable both Full Disk Access and the Messages connector for Muse to read their Messages content. Apple’s developer note did not specifically cite Muse or Meta.

The issue has also drawn attention after a Wired report cited a flaw in ChatGPT’s Mac app that could have allowed hackers to access sensitive data. Desktop AI agents such as OpenClaw, Dots, and Muse often ask users to grant Full Disk Access so the agents can access files, messages, and other data, enabling more tasks but creating significant privacy and security risks. Some users have chosen to run such agents on dedicated machines, a practice that has contributed to Mac Mini shortages this year, according to Engadget.

Apple said its new controls are meant to add friction and make sure users understand what they are allowing. The company said users who wish to grant an app Full Disk Access should be able to do so only through a clear, deliberate action. The change is part of Apple’s response to the rapid rise of always-on AI agents that request substantial access to personal data.

Editor's Summary

Apple is adding new macOS controls for Full Disk Access, requiring explicit user action before an app can gain broad access to files, messages, and browsing history. The move follows disputes and reports about AI agents, including Meta’s Muse and ChatGPT’s Mac app, that raised concerns about desktop AI privacy and security. Apple has not said when the changes will take effect or what specific restrictions will be introduced.