Apple is tightening Mac Full Disk Access over AI agents

Apple plans to make Full Disk Access on macOS harder to grant. In a developer news post on October 2, the company says some developers use the permission in ways that put users at risk. Files, mail, messages and even browsing history can end up exposed without users fully understanding it. Going forward, users will only be able to grant this level of access "with very explicit user action." Apple gives its reason in the same post: "As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially."

What the permission covers today

Full Disk Access exists so that backup apps can reach every file. To do that, it bypasses the controls macOS otherwise uses to protect individual folders and the data of other apps. According to Apple's support page, an app with the permission can open all files on the computer, data from Mail, Messages, Safari and Home, Time Machine backups and certain administrative settings for all users on the Mac. For communication apps, Apple adds, this "can also compromise the privacy of the people users are communicating with."

The dispute over Meta's Muse

Apple's announcement follows reports about Meta's AI agent Muse. Inc. columnist Jason Aten wrote in September that Muse synced more than 187,000 rows of message history on his Mac, even though he had declined Messages access during setup. Meta disputes his account. Spokesperson Andy Stone said users have to turn on both Full Disk Access and the Messages connector before Muse can read any messages. It is not clear what happened on Aten's Mac. MacRumors and 9to5Mac also name OpenAI's Dots as an example of an agent that asks for broad access to the computer. ChatGPT's Mac app can already log what you do on your Mac.

No version and no date yet

Apple has not named a macOS version or a date. macOS 27, released on September 14, does not include the new controls, and the post does not describe what the extra confirmation will look like. Until then, a single switch decides.

How to see which apps have Full Disk Access

You can check now. Choose Apple menu, then System Settings, click Privacy & Security in the sidebar and open Full Disk Access. Every app you have given the permission is listed there with a switch next to it. Backup software and some security tools do need it. For an AI assistant, ask whether it has to read your mail and messages at all, or whether access to specific folders under Files & Folders is enough. Turning the switch off may break features in the app, but the app stays installed. Two other entries in the same list matter for agents that click and type on your computer. Accessibility lets apps control your Mac, and Screen & System Audio Recording lets them record what is on your screen. Meta's AI features have raised privacy questions before, as with Muse Image and Instagram photos, so the list is worth a look from time to time.