Apple is tightening its macOS "Full Disk Access" permissions on October 2, 2026, requiring "very explicit user action" to grant apps system-wide data access. The move follows a controversy where columnist Jason Aten accused Meta's Muse AI of reading private messages without permission. Meta disputed the claim, stating the integration is strictly opt-in. Apple warns that increasingly autonomous AI agents substantially elevate data privacy risks, necessitating stricter controls over a setting originally designed for backup software.
Apple's planned macOS permission changes
- ▪On October 2, 2026, Apple announced upcoming macOS changes requiring 'very explicit user action' to grant Full Disk Access to limit third-party app and AI agent data access, without detailing the mechanism or release date
- ▪Apple warned in a developer blog post on October 2, 2026, that as AI agents become increasingly capable and autonomous, the privacy risks associated with granting Full Disk Access will grow substantially
- ▪Apple stated on October 2, 2026, that it is committed to ensuring users clearly understand the risks of Full Disk Access before granting such access
Risks of macOS Full Disk Access
- ▪Apple noted that macOS Full Disk Access, originally designed to let backup software function by sidestepping privacy controls, is increasingly challenged by highly capable, autonomous AI agents
- ▪Apple stated that some developers are using Full Disk Access in ways that put users at risk by exposing files, mail, messages, and browsing history without the users' full knowledge and understanding
Controversy over Meta's Muse AI agent
- ▪Inc. columnist Jason Aten alleged that Meta's Muse AI agent accessed his private Apple Messages on his Mac without his explicit permission, sparking public concern over desktop AI data privacy
- ▪macOS security expert Patrick Wardle questioned Meta's defense that Muse's Messages access is opt-in, noting that technically any app granted Full Disk Access can read non-root files, including chat histories, browser cookies, and browsing history
- ▪Meta spokesperson Andy Stone and CTO David Singleton disputed Jason Aten's claims, stating that Muse's Messages integration is entirely opt-in and requires both macOS Full Disk Access and the Muse Messages connector to be enabled
Debatable claims
- ▪Users bear the primary responsibility for data exposure when granting Full Disk Access
- ▪The macOS Full Disk Access permission model is outdated for modern AI applications
- ▪Apple's restriction of macOS Full Disk Access is necessary to protect user privacy
- ▪Autonomous AI agents should not be granted Full Disk Access on desktop operating systems
Story comments
Loading comments…