Apple Plans Tighter macOS Full Disk Access Controls Amid AI Agent Risks

Summary
Apple plans to add controls requiring explicit user consent before apps receive Full Disk Access in macOS, citing privacy risks from AI agents and other apps. The company has not announced a rollout date or detailed the changes.
Key points
- Full Disk Access can let apps read or modify sensitive files, including mail, messages, and browsing history.
- Apple says some apps use the permission in ways that may expose users’ data without their full understanding.
- Apple plans additional controls to ensure users explicitly consent before granting this level of access.
- The company did not specify when the controls will roll out or what prompted the decision.
- The announcement follows a disputed claim that Meta’s Muse assistant accessed a journalist’s private iMessages; Meta said Full Disk Access and a Messages connector must both be explicitly enabled.
Article Details
- Event Type
- Apple announced plans to tighten macOS Full Disk Access controls, requiring explicit user consent for applications to receive that access.
- Impact
- The change is intended to reduce the risk of applications exposing sensitive files, mail, messages, and browsing history. Jason Aten reported that Meta’s assistant Muse accessed his private iMessages while he believed Full Disk Access was disabled; Meta executives disputed the claim, saying both Full Disk Access and a Messages connector must be explicitly enabled. Apple did not specify a rollout date or the exact circumstances that prompted the planned changes.
People
Vendors
Products
Full Disk AccessApple has announced tightened Full Disk Access controls in macOS in light of the risks posed by continuously evolving AI agents.macOSApple has announced tightened Full Disk Access controls in macOS in light of the risks posed by continuously evolving AI agents.MuseTwo weeks ago, tech journalist Jason Aten revealed that Meta’s personal assistant Muse accessed his private iMessages even though he believed Full Disk Access was disabled.