News in Short

• Apple is introducing additional controls around Full Disk Access on macOS.
• The move comes as AI agents gain deeper access to files, messages and other data.
• Apple says some developers are using the permission in ways that could put users at risk.
• Full Disk Access can allow apps to access files, Mail, Messages and browsing history.
• Apple says users will need to take more explicit action before granting the permission.

AI agents are becoming more capable on desktop computers. However, that capability also requires deeper access to personal data.

Apple is now responding to that risk by changing how macOS handles Full Disk Access. The company says it will introduce additional controls to make the permission harder to grant without clear user action.

The move comes after recent reports raised questions about how AI agents access private files and messages on Macs.

Why Full Disk Access matters

Full Disk Access is a macOS permission that gives applications broad access to information stored on a Mac.

According to Apple, the feature was originally designed to support functions such as backups. However, developers are now using the permission for other applications, including AI agents.

Apple says the permission can allow an app to access files, Mail, Messages and browsing history.

That makes it particularly important for AI agents that operate directly on a user’s computer.

These agents can perform tasks across applications and interact with information stored on the device. However, that also means they may require access that conventional applications do not typically need.

Apple says AI agents are creating new risks

Apple says some developers are using Full Disk Access in ways that could expose information without users fully understanding the implications.

The company specifically highlighted the growing capabilities of AI agents.

“As AI agents become increasingly capable and autonomous,” Apple said, the risks associated with this level of access could increase substantially.

Apple therefore wants users to understand what they are allowing before giving an application such broad access.

Going forward, the company says it will introduce new controls that require “very explicit user action” before users can grant the permission.

Meta Muse report adds to the concern

Apple’s announcement comes days after a report involving Meta’s Muse AI app.

Inc. columnist Jason Aten claimed that Muse had access to the content of his private messages even though he said he had not given the AI agent permission to access them.

Meta disputed the claim.

The incident nevertheless raised broader questions around desktop AI agents and the permissions they require to operate.

AI agents can potentially work with files, messages and other information across a computer. As a result, users may give them broader access than they would give a conventional application.

ChatGPT Mac app flaw also raised concerns

Apple’s move also follows a Wired report about a flaw in ChatGPT’s Mac application.

The report said the vulnerability could have allowed hackers to access sensitive information.

The cases are different, but they highlight the broader security challenge around AI applications operating on desktop computers.

An AI agent may need access to more parts of a computer to complete tasks. At the same time, that access can increase the potential impact of security flaws or unintended behaviour.

Apple wants users to make clearer privacy decisions

Apple says its upcoming controls are intended to ensure that users who genuinely want to provide Full Disk Access can still do so.

However, the company wants that decision to involve more explicit action.

The goal is to make the consequences of granting such access clearer before an application receives permission.

Apple has not detailed exactly how the new controls will work or when they will arrive. The company also did not respond to TechCrunch’s inquiry about the feature change.

The announcement nevertheless highlights a growing challenge for desktop AI. As agents become more autonomous, access to personal data can become central to what they can do. Apple is now looking to make that access more deliberate on the Mac.