Apple will limit Mac disk access as AI agents ‘substantially’ increase risk
Apple will tighten Mac full-disk access after AI-agent risks and a report that Meta Muse read messages.
Apple said Mac apps will soon need very explicit user action to obtain Full Disk Access, citing substantially higher risk as AI agents become more autonomous. The change follows a report that Meta's Muse chatbot appeared to know the contents of a journalist's messages without the user believing permission had been granted. Meta said Messages access is opt-in and requires both Full Disk Access and the Messages connector. Apple did not give a release date and did not immediately comment.
- Mac apps will need very explicit action for full disk access.
- Apple cites growing risk from capable, autonomous AI agents.
- A report said Meta Muse knew a user's message contents.
- Meta says access requires Full Disk Access and the Messages connector.
Full article391 words · extracted from theverge.com · click to collapse
Mac apps will soon need ‘very explicit user action’ to gain full disk access, according to Apple.
Mac apps will soon need ‘very explicit user action’ to gain full disk access, according to Apple.
by Emma Roth
Oct 2, 2026, 8:08 PM UTC
Photo: Amelia Holowaty Krales / The Verge
Emma Roth
is a news writer who covers the streaming wars, consumer tech, crypto, social media, and much more. Previously, she was a writer and editor at MUO.
Apple will add new limits for “full disk access” on Mac in response to risks posed by AI agents, as reported earlier by TechCrunch. In an update on Friday, Apple says it’s rolling out new controls to “ensure that users who genuinely wish to grant an app this extraordinary level of access can only do so with very explicit user action.”
The change comes just weeks after Inc’s Jason Aten found that Meta’s Muse AI somehow knew the contents of his messages, despite not giving the chatbot explicit permission to access them on his iPhone or Mac. Meta spokesperson Andy Stone pushed back on this report, saying access to Messages is “entirely opt-in.” Stone added that you have to “enable both Full Disk Access and the Messages connector for Muse to be able to read your Messages content.”
Now Apple is addressing how developers use that sweeping access, saying:
Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems—including files, mail, messages, and even browsing history—without users’ full knowledge and understanding… As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially.
Full disk access is a permission on macOS that gives an app access to a user’s entire system. Apple says the feature “largely sidesteps” privacy controls offered to users “to allow backup apps to function properly on Mac.” The company doesn’t say when it plans to roll out its update for full disk access. Apple didn’t immediately respond to The Verge’s request for comment.
Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.
- Emma Roth
The Verge Daily
A free daily digest of the news that matters most.
Email (required)