Apple announced that it will add stricter safeguards to the macOS feature known as Full Disk Access. The setting, originally created to allow backup utilities to read all files on a Mac, is now being reconsidered because artificial-intelligence agents can exploit the same level of permission to reach personal data. Apple says the change responds to emerging threats linked to more capable AI software.
Apple’s move follows a story in which a journalist alleged that Meta’s Muse application on macOS accessed private messages without explicit permission, a claim Meta denied. Inc. columnist Jason Aten later reported that Muse appeared to know the content of his messages even though he said he had not granted the AI access. The episode heightened concerns about trust in desktop AI assistants.
A Wired investigation also highlighted a vulnerability in the official ChatGPT Mac client that could let an attacker retrieve sensitive information from a user’s computer. The report suggested that the flaw might be exploited to bypass existing protections and read files, emails, or other personal data. Together with the Muse incident, the findings illustrate how AI-driven applications can become vectors for data exposure on desktop platforms.
Full Disk Access grants an application permission to read a Mac’s entire file system, including mail, messages, and browsing history. Apple’s developer blog warned that some creators are employing the privilege in ways that could expose everything on a user’s device without the owner’s full awareness. The company argues that such broad access should be reserved for cases where users deliberately choose to enable it.
Going forward, Apple says it will require a clearly defined user action before an app can obtain Full Disk Access. The forthcoming controls will surface a prompt that explains the scope of data the application could reach and will only proceed after the user confirms the request. Apple described the measure as essential because AI agents are becoming increasingly autonomous and the associated privacy risks are expected to grow.
The tightened regime signals a broader industry shift toward tighter oversight of AI-enabled software on personal computers. By mandating explicit consent, Apple aims to give users clearer insight into how their data may be accessed, potentially reducing inadvertent exposure. Regulators and security experts may view the policy as a benchmark for future standards governing AI interactions with local storage and communications.