Apple to Tighten macOS Full Disk Access Controls as AI Agent Risks Grow

Apple says it will add controls to macOS’s Full Disk Access setting, citing risks from increasingly capable AI agents. The setting can let apps access files, mail, messages and browsing history.

The announcement followed a report by Inc. columnist Jason Aten that Meta’s Muse app on Mac knew the contents of his private messages. Aten said he had not given the AI agent permission; Meta disputed the claim.

Apple said Full Disk Access was designed to help backups work properly, but that some developers use it in ways that could expose everything on a system without users’ full knowledge. Muse lets users optionally enable the permission.

Apple says future controls will require “very explicit user action” from people who want to grant an app this level of access. The company said the risks would grow as AI agents become more capable and autonomous, and said it wants users to understand them before granting access.

The move also follows a Wired report that a flaw in ChatGPT’s Mac app could have allowed hackers to access sensitive data. Apple did not respond to TechCrunch’s inquiry about the change.