Apple will limit Mac disk access as AI agents ‘substantially’ increase risk

Apple says it will tighten macOS controls for apps requesting Full Disk Access, requiring “very explicit user action” before granting that permission. The company framed the change as a response to growing risks from increasingly capable AI agents that could exploit broad system access to read files, mail, messages and browsing history.

By AI Newsroom· Reviewed by Pranav, Founder & Editor-in-ChiefPublished 25 minutes agoUpdated 25 minutes ago0 views

Apple will limit Mac disk access as AI agents ‘substantially’ increase risk

Why It Matters

Full Disk Access grants apps sweeping visibility into a user’s system, and Apple’s move could limit how third-party AI agents and other apps leverage that capability — a shift with implications for privacy, app functionality such as backups, and how developers request permissions. The announcement follows reporting about a chatbot that appeared to access message content without obvious permission, prompting debate about how such access is granted and used.

Key Facts

Announcement date: Oct 2, 2026
Permission affected: Full Disk Access on macOS
Apple's language on user action: Apps will need 'very explicit user action' to gain Full Disk Access
Apple's stated concern: As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially
Context prompting change: Report by Inc's Jason Aten that Meta's Muse AI appeared to know message contents without explicit permission

Apple announced plans to restrict how apps obtain Full Disk Access on Mac, saying developers will now have to obtain that permission through very explicit user actions. The company framed the change as necessary because some developers have been using Full Disk Access in ways that could expose a user’s files, email, messages and browsing history without the user fully understanding the implications.

Full Disk Access is a macOS permission intended to let apps access the entire system, and Apple noted it largely circumvents other privacy controls so that utilities such as backup apps can function correctly. In its communication, Apple warned that as AI agents grow more capable and autonomous, the potential harm from this level of access will increase substantially.

The announcement follows recent reporting that raised concerns about chatbots and message access: Inc reporter Jason Aten found that Meta’s Muse AI seemed to know the contents of his messages despite not being explicitly granted permission on his iPhone or Mac. Meta spokesperson Andy Stone disputed that account, saying Messages access for Muse is "entirely opt-in" and requires both Full Disk Access and a Messages connector to be enabled.

Apple did not specify a rollout date for the new Full Disk Access controls and did not immediately reply to The Verge’s request for comment. The company said the adjustment aims to ensure that users who genuinely want to grant an app this level of access can do so only after taking clear, deliberate action.