Why Apple Is Tightening macOS Full Disk Access

Apple plans to add controls to macOS Full Disk Access, a permission that can open up files, email, messages and browsing history to an app. Apple says the access helps backup apps work, but warns that some developers use it in ways that users may not fully understand. As AI agents become more capable and autonomous, the consequences of granting such broad access could grow. 13

What Full Disk Access can expose

Apple says Full Disk Access largely bypasses other privacy controls so backup apps can function. But the permission can expose data across a Mac, including files, mail, messages and browsing history. Access to communications can also affect the privacy of people who never granted the app permission themselves. 1

That broad reach matters for any app with the permission—not only AI tools. An agent that can act on a user’s behalf may also encounter sensitive information if it has access to those files and communication records. Apple’s announcement focuses on the risks associated with the level of access, rather than saying that every agent has misused it. 13

What Apple says will change

Apple says it will introduce “additional controls” so users who want to grant an app this exceptional level of access must take a more explicit action. Reuters reported that Apple plans to make it more obvious when AI agents request access to all the data on a Mac. 18

Apple has not described the exact screens or steps users will see. The announcement therefore indicates a change to how access is granted, but does not establish whether the new controls will also restrict what an app can read after approval. 14

Why desktop agents are part of the discussion

The announcement arrived amid wider attention to desktop agents such as Meta’s Muse and OpenAI’s Dots, which can carry out tasks for users. 8 A journalist claimed that Muse had read private messages on their Mac; Meta disputed the claim. It remains a disputed allegation, not an established finding, and the available reporting does not show that Apple identified it as the cause of its decision. 3

The episode highlights a broader concern: when software can access a user’s communications, information about other people in those conversations may be exposed too. Apple explicitly raised that third-party privacy risk in its statement. 1

What remains unknown

Apple has not provided a release date or detailed the design of the safeguards. It is also unclear whether the changes will affect only the consent process or limit the access granted, and whether agent developers or backup-tool makers will need to adjust their apps. 14

For now, Apple’s announcement is a plan—not a description of protections already in place. The key question is how the eventual controls will balance clearer, more deliberate consent with the broad access some legitimate tools need to work.