Apple has put Mac users on notice: the powerful “Full Disk Access” setting is about to get harder to grant, because always-on AI agents are turning it into a new kind of privacy risk. In a post on its developer news site on October 2, Apple said it will introduce “additional controls” for Apple macOS Full Disk Access, explicitly citing the growth of AI agents as the reason, according to MacRumors and The Straits Times.
It is rare for Apple to publicly announce a coming change to a Mac privacy setting — and rarer still for the company to name the threat model driving it. Here, Apple was blunt: the problem is AI agents, and the risks “will grow substantially.”
Apple macOS Full Disk Access AI agents: the setting explained
Full Disk Access is one of the most sweeping permissions a Mac can grant. Unlike iPhones and iPads — where sandboxing means no single app can reach inside another app’s data by default — Macs offer a Full Disk Access option that lets apps such as cloud backup services access everything on the machine, with the user’s permission, according to The Straits Times.
Apple said “some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems — including files, mail, messages, and even browsing history — without users’ full knowledge and understanding.”
The critical line: “As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially.”
Going forward, Apple wrote, “we will introduce additional controls to ensure that users who genuinely wish to grant an app this extraordinary level of access can only do so with very explicit user action” — signaling that granting the permission will require more deliberate steps than it does today.
The trigger: Meta’s Muse and a disputed accusation
Apple’s announcement landed days after Inc. technology columnist Jason Aten accused Meta’s Muse AI agent of reading private messages on his Mac, saying he had not enabled Full Disk Access — an account reported by The Straits Times.
Meta pushed back. Spokesman Andy Stone said Muse’s access to Apple’s Messages app is strictly opt-in: “You have to enable both Full Disk Access and the Messages connector for Muse to be able to read your Messages content. It can’t read your messages unless you do this. And it can be revoked at any time.”
That dispute remains unsettled — Aten’s claim and Meta’s rebuttal have not been independently resolved in the reporting. Crucially, Apple named no company and took no side: the company did not adjudicate the Aten-vs-Meta disagreement, and its announcement should not be read as a finding against any specific app or developer.
The rise of always-on AI agents
The broader context is a new category of software that lives on the user’s computer and acts on their behalf. Coverage of Apple’s announcement points to always-on AI agents such as Meta’s Muse and OpenAI’s Dots — agents designed to read, act on and respond to the user’s data across apps, according to MacRumors.
That design is exactly what makes Full Disk Access such a potent combination with AI agents. A traditional app uses the permission for a narrow job, like backing up files. An always-on agent armed with the same permission can potentially read across the user’s entire digital life — messages, mail, files and browsing history — to do its job. Apple’s move is the first major signal that platform owners see agents as a fundamentally different threat model from ordinary apps.
For more on the agents driving this change, see our earlier coverage: the rise of Meta’s Muse AI agent and OpenAI’s always-on Dots agent.
What Apple didn’t say
Apple’s announcement was deliberately forward-looking — and deliberately thin on specifics. The company did not say when the new controls will be implemented, did not name any app or company, and did not describe what the new controls will look like, according to MacRumors. Apple also did not respond to questions about timing, according to aitechdaily.
That leaves the practical questions open: whether the change arrives with the next macOS release or later, whether it will require developers to re-request permission, and how exactly “very explicit user action” will differ from today’s already opt-in flow. Until Apple says more, Mac users should treat this as a heads-up rather than a change that has already taken effect.
Apple macOS Full Disk Access AI agents: what Mac users should do now
The announcement is a good prompt to audit what currently holds Full Disk Access on your machine. On a Mac, that permission lives under System Settings, in the Privacy & Security section — and each listed app can have the permission switched off individually.
Worth checking in particular: any AI agent or assistant apps installed recently, backup tools that requested broad access, and anything you granted permission to without reading the prompt carefully. As Apple itself put it, some apps are using the setting “without users’ full knowledge and understanding” — a problem the coming controls are meant to fix, but which users can act on today.
The move also fits the wider Washington-versus-Silicon-Valley AI moment: while the Trump administration has appointed an AI czar while opposing new restrictions, Apple is quietly tightening the technical plumbing of privacy on the devices AI agents run on. The regulators and the platforms are moving — just not in the same direction.
FAQ
What is Full Disk Access on macOS?
Did Apple name Meta’s Muse or any other AI agent?
Did Apple name Meta’s Muse or any other AI agent?
No. Apple named no company or app, and its announcement should not be read as a finding against any specific agent. The announcement followed a dispute between Inc. columnist Jason Aten and Meta over Muse’s access to Apple Messages, but that dispute remains unsettled.
When will the new macOS Full Disk Access controls arrive?
Apple did not say. The company gave no date, no named targets and no description of the controls themselves — only that they are coming.
Should Mac users change anything right now?
No change is required today, but it is a good moment to review which apps hold Full Disk Access under System Settings > Privacy & Security and revoke it from anything that doesn’t genuinely need it.
Sources: The Straits Times (Oct 2); MacRumors (Oct 2); aitechdaily.
Leave a Reply
You must be logged in to post a comment.