Apple Tightens Mac Full Disk Access Controls Over Rising AI Agent Risks

Apple is preparing to introduce stricter controls for its "Full Disk Access" permission on macOS, warning that the rapid rise of autonomous AI agents poses growing privacy and security risks to Mac users.

According to Apple, the upcoming update will ensure that granting an application this broad level of system access will require "very explicit user action." The move follows concerns about developers leveraging the permission to access sensitive user data beyond what users might anticipate.

Addressing Sweeping System Permissions

Full Disk Access is a powerful permission on macOS that allows an application to view virtually every file on a system. Apple originally designed the setting to "largely sidestep" standard privacy controls so that legitimate utilities—such as backup software—could operate properly without constantly prompting for individual file permissions.

However, Apple warned that this broad access can be easily exploited or misunderstood, particularly as AI tools begin interacting directly with local desktop environments.

"Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems—including files, mail, messages, and even browsing history—without users’ full knowledge and understanding," Apple stated. "As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially."

Scrutiny Over AI Access to Messages

Apple's announcement comes shortly after reports raised questions about how AI agents access personal communications. Jason Aten of Inc. reported discovering that Meta’s Muse AI appeared to have access to the contents of his messages despite him not explicitly granting the chatbot direct permission on his iPhone or Mac.

Meta spokesperson Andy Stone responded to the report, explaining that message access is "entirely opt-in." Stone noted that users must enable both Full Disk Access and the specific Messages connector for Muse to read message content.

Nevertheless, the incident highlighted how complex permission chains can lead users to unintentionally expose personal records across their computers.

Rollout Timeline

Apple has not yet specified an exact release date or version number for when the stricter Full Disk Access safeguards will roll out to macOS users. Once deployed, users should expect more explicit prompts and tighter verification steps before any app or autonomous AI agent can obtain unrestricted access to their system drives.