Apple to tighten macOS Full Disk Access over AI risks

Apple will require very explicit user action before granting macOS Full Disk Access, citing higher risk from autonomous AI agents.

Apple told developers it will tighten macOS Full Disk Access so the permission is granted only after very explicit user action, and it gave no rollout date. The setting largely bypasses ordinary privacy protections so backup apps can work, but Apple says some developers use it in ways that can expose files, mail, messages, and browsing history without users fully understanding the risk, and that communication apps can also expose other people’s data. Apple said the danger will grow substantially as desktop AI agents become more capable and autonomous. The announcement follows reporting that Meta’s Muse app appeared to know a journalist’s private messages; TechCrunch called that report disputed, while The Verge said Meta responded that Messages access is opt-in and requires both Full Disk Access and the Messages connector. Only TechCrunch cited earlier reporting that a ChatGPT Mac app flaw could have exposed sensitive data. The Verge also said Apple did not immediately comment, even as all three outlets reported Apple’s planned change.

• Apple will add controls so macOS Full Disk Access is granted only after very explicit user action.
• No rollout or release date was given.
• Full Disk Access largely bypasses ordinary macOS privacy protections so backup apps can function.
• Apple says some uses can expose files, mail, messages, and browsing history without users fully understanding the risk, and communication apps can expose other people’s data.
• Apple says more capable, autonomous desktop AI agents will substantially increase that risk.
• TechCrunch called disputed a report that Meta’s Muse app read a journalist’s private messages; The Verge said Muse appeared to know message contents and that Meta says Messages access is opt-in and requires both Full Disk Access and the…
• TechCrunch alone cited earlier reporting that a ChatGPT Mac app flaw could have exposed sensitive data.
• Coverage is dated 2026-10-02 (TechCrunch 18:11 UTC, The Verge 20:08 UTC, Lobsters 20:10 UTC).