Apple is preparing to strengthen privacy controls in macOS after warning that increasingly capable AI agents could create new risks when they are given broad access to data on a Mac.
The company said it will introduce additional controls around Full Disk Access, a macOS permission that can allow applications to access sensitive information including files, mail, messages and browsing history. Apple said users who genuinely want to grant this level of access will need to take a more explicit action before an app receives the permission.
Why Apple Is Changing Full Disk Access
Full Disk Access is a powerful macOS permission originally intended to help applications such as backup software work properly.
Apple says the permission can largely bypass some of the privacy protections built into its developer APIs. As a result, an application with Full Disk Access can potentially reach information across a user’s Mac that would normally be protected by separate privacy controls.
Apple warned that some developers are using the permission in ways that could expose sensitive information without users fully understanding how much access they are granting.
The company also highlighted a wider concern: AI agents are becoming more capable and autonomous, increasing the potential consequences of giving them broad access to a computer.
AI Agents Are Changing the Privacy Risk
Traditional applications generally perform specific functions based on direct user instructions.
AI agents can operate differently. They may interact with files, applications and other services to complete multi-step tasks on behalf of a user.
That makes broad system permissions particularly important.
An AI agent with access to large amounts of local data may have the technical ability to find information far beyond what is required for a single task. Apple is therefore focusing on making the decision to grant Full Disk Access more deliberate and understandable.
Apple said the risks associated with this level of access will grow as AI agents become increasingly capable and autonomous.
Meta Muse Privacy Concerns Put Attention on Mac Permissions
Apple’s announcement comes amid renewed attention on AI agents running directly on Macs.
A technology journalist recently claimed that Meta’s Muse AI assistant had accessed private Messages content without clear permission. Meta disputed the claim, saying Muse’s Messages functionality requires both Full Disk Access and a separate Messages connector.
Apple did not name Meta or Muse in its announcement.
The company’s statement instead addressed the broader issue of applications receiving unusually broad access to personal information on macOS.
That distinction is important: Apple’s announcement does not establish that a particular AI application violated macOS privacy controls.
What Full Disk Access Can Expose
According to Apple, the permission can provide access to several categories of sensitive information, including:
- Files stored on the Mac
- Messages
- Browsing history
For communication applications, Apple also warned that broad access could affect the privacy of people communicating with the Mac user, not just the person who installed the application.
This makes Full Disk Access particularly significant for AI assistants designed to work across multiple applications.
Apple Has Not Revealed the New Controls Yet
Apple has confirmed that additional controls are coming, but it has not provided detailed information about exactly how they will work.
The company has also not announced a specific rollout date for the new controls.
For now, Mac users continue to manage Full Disk Access through macOS privacy settings.
The planned change appears focused on improving the consent process so users have a clearer understanding of the scope of access before approving it.
What Mac Users Can Do Now
Mac users do not need to wait for Apple’s upcoming changes to review their existing permissions.
Users can check which applications currently have Full Disk Access and remove access from applications that no longer need it.
Before granting the permission to an AI application, users should consider why the application requires such broad access and whether the requested capability is necessary for the task they want it to perform.
Full Disk Access itself does not automatically mean that an application uploads or shares a user’s files. What happens to the data after an application accesses it depends on the application’s design, settings and privacy practices.
Apple’s AI Privacy Challenge
Apple’s move highlights a growing challenge for desktop operating systems.
AI agents are becoming more useful precisely because they can interact with more parts of a user’s digital environment. But the same access that allows an agent to complete complicated tasks can also increase the amount of private information exposed if permissions are misunderstood or misused.
Apple’s planned changes suggest that the company wants users to make a more informed decision before giving an application access to large portions of their Mac.
The company has not yet revealed the final design of the new controls, so the practical impact on AI applications and other Mac software remains to be seen.
