Apple tightened Mac security by adding new controls on the Mac so that an app can have Full Disk Access only through “very explicit user action”. Recently, users have been granting full disk access to AI agents, often without fully understanding what it exposes. That can put them at risk and open up everything on their system, from personal data and personal work to their browsing history.
Apple said: “Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems—including files, mail, messages, and even browsing history—without users' full knowledge and understanding. For communication apps, this can also compromise the privacy of the people users are communicating with.”
Apple hasn’t confirmed the date or the macOS version, nor are there any details of what the new controls will look like. This comes as a very welcome step after the recent concerns around Muse (Meta’s AI agent) reported by Jason Aten (a columnist at Inc.).
According to Jason, he tested Muse on an iPhone and a Mac mini and found that Muse suggested a column idea drawn from a private conversation, and referred to a message from his editor.
When asked about it, Muse responded that it was only seeing incoming notification text, but he later found that Muse had synced his Messages database “up to row 187,462”.
Meta disputes his account. Meta’s VP of Communications, Andy Stone, responded: “The Messages integration in the Muse app for Mac is entirely opt-in. You have to enable both Full Disk Access and the Messages connector for Muse to be able to read your Messages content.”
Sahi Padhai tip: before granting any AI agent broad access, check exactly what it can read.
What is Apple changing?
Apple will add controls so apps can get Full Disk Access only through very explicit user action. It has not said when.
What is Full Disk Access?
A macOS permission that lets an app read almost all your data, including mail, messages and browsing history. It was meant for backup apps.
Why does Apple blame AI agents?
Apple says agents are becoming more capable and autonomous, so the risk of giving one access to everything “will grow substantially”.
What happened with Meta's Muse?
A journalist said Muse synced his Messages with Full Disk Access off. Meta says that is impossible without three permission steps. It is unresolved.
What should Mac users do now?
Check System Settings, then Privacy & Security, then Full Disk Access, and switch off any app that doesn't need it.