Apple Plans Tighter Mac Disk Access Controls As AI Agents Spread
Apple says new macOS controls will require more explicit user action before apps receive Full Disk Access, citing privacy risks from increasingly capable AI agents.
Apple plans to tighten how Mac apps obtain Full Disk Access, a macOS permission that can expose files, mail, messages and browsing history. According to TechCrunch, Apple says increasingly capable AI agents make that level of access riskier, and it wants users to take more explicit action before granting it.
Table of Contents
Why Apple Is Changing the Permission
Full Disk Access was designed in part to let backup apps work properly, according to The Verge. But Apple says some developers are using the permission in ways that may expose users’ information without their full understanding of what an app can see. Engadget reports that Apple also warned of a risk to the privacy of people with whom users communicate.
Desktop AI agents can use broader access to work with a user’s files, messages and other information. Engadget names OpenClaw, Dots and Muse as examples of clients that may encourage users to grant Full Disk Access. The permission can help agents perform more tasks, but it also gives them access to sensitive material beyond the immediate task a user has in mind.
What the New Controls Will Do
Apple says it will add controls so that granting an app Full Disk Access requires “very explicit user action,” TechCrunch reports. The company’s stated aim is to make sure people understand the privacy implications before they approve such sweeping access. Apple says the risks will grow as AI agents become more capable and autonomous.
The exact changes remain unclear. Engadget reports that Apple has not explained how the new process will differ from the current one, and both Engadget and The Verge say the company has not given a rollout date. The announcement therefore sets out Apple’s intention, rather than a new approval procedure users can follow today.
A Disputed Muse Report Adds Context
Apple’s announcement follows a report by Inc. columnist Jason Aten that Meta’s Muse AI appeared to know the contents of his private messages, although he believed he had not permitted that access. Meta disputed the account. As The Verge reports, Meta spokesperson Andy Stone said access to Messages is opt-in and requires both Full Disk Access and the Messages connector to be enabled.
Apple did not name Muse or Meta in its warning, according to Engadget. The dispute illustrates the question behind its planned controls: whether users understand the reach of a permission they grant to an AI agent. For now, the reports leave both the circumstances of Aten’s experience and the practical effect of Apple’s forthcoming changes unresolved.
Sources
This story was compiled by AI from the reports below. Read the originals for the full details.