Apple Tightens macOS Full Disk Access Rules Over AI Agent Risk

Apple will add new consent requirements to macOS's "Full Disk Access" permission, the company said in a developer blog post published Oct. 2, pointing to rising risk from AI agents that can read a user's files, mail, messages and browsing history, according to TechCrunch.

What Is Full Disk Access on macOS?

Full Disk Access was built to let backup software work properly, Apple said. The setting, once granted, gives an app permission to reach files, mail, messages and even a user's browsing history — a scope Apple itself describes as "extraordinary." Apple said that level of access is what has become riskier as desktop AI agents gain more autonomy over a user's system.

Why Is Apple Making the Change Now?

Apple's statement followed two specific reports cited by TechCrunch. Inc. columnist Jason Aten reported that Meta's Muse app on Mac appeared to know the contents of his private messages even though he said he had not granted permission for that access — a claim Meta disputes, per TechCrunch's reporting. Separately, a Wired report cited a flaw in ChatGPT's Mac app that could have let hackers reach sensitive data.

Apple did not tie its announcement directly to either incident in its developer post, but the timing — days after the Muse report — was noted by TechCrunch. Apple told TechCrunch it did not respond to an inquiry about the specific change.

What Did Apple Say About the Risk?

Apple's developer blog post was direct about why the setting now needs more friction. "Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems... without users' full knowledge and understanding," the company wrote, according to TechCrunch.

Apple added: "Addressing this is critical. As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially. We are committed to ensuring users clearly understand these risks before granting such access, so they can make informed decisions about their own data and privacy."

What Changes for Developers and Users?

Apple said it will introduce controls designed to make sure that any user who wants to grant Full Disk Access can still do so, but only through "very explicit user action." The company framed the move as preserving the option for users who genuinely want that level of access while cutting down on cases where permission is granted without a full understanding of what it covers. TechCrunch reported Apple did not detail the specific technical mechanism for the new consent step.

What To Watch

• Whether Apple publishes technical guidance for developers ahead of the next macOS update
• Whether Meta responds further to the Muse messaging claim beyond its initial dispute
• Whether OpenAI addresses the ChatGPT Mac app flaw described in the Wired report cited by TechCrunch
• Whether other AI agent makers adjust default permission requests on macOS before Apple's controls take effect