Apple Tightens Full Disk Access Controls as AI Agents Expose Privacy Risks on macOS
25 Sources
[1]
Apple changes full-disk access permissions to curb abuse from AI agents
Apple says it is changing its macOS privacy settings to stop third-party app developers from misusing them to access message histories. Friday's announcement comes two weeks after tech columnist Jason Aten said that Meta's new general-purpose AI agent Muse sent him an unsolicited notification
[2]
Apple says it's tightening macOS 'Full Disk Access' controls due to new risks from AI agents
Days after a journalist claimed that Meta's Muse app on Mac read their private messages -- a claim that Meta disputed -- Apple announced that it's introducing additional controls around a setting called "Full Disk Access" on macOS. The feature was designed to allow backups to function properly, but
[3]
Apple will limit Mac disk access as AI agents 'substantially' increase risk
Apple will add new limits for "full disk access" on Mac in response to risks posed by AI agents, as reported earlier by TechCrunch. In an update on Friday, Apple says it's rolling out new controls to "ensure that users who genuinely wish to grant an app this extraordinary level of access can only
[4]
Amid Concerns About AI Agents Running Amok, Apple Restricts Full Disk Access
(Credit: Stanislav Kogiku/SOPA Images/LightRocket via Getty Image) AI agents are more widely used than ever before, but a good chunk of consumers still have fears about giving them too much responsibility and access to their personal data. Apple is now set to roll out an update that could
[5]
Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access
Apple has announced that it's taking steps to tighten controls around a macOS setting called Full Disk Access (FDA) due to security risks posed by artificial intelligence (AI) agents. "Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their
[6]
Apple says it will flag AI requests for Mac data after Meta's Muse draws complaints
SAN FRANCISCO, Oct 2 (Reuters) - Apple (AAPL.O), opens new tab said on Friday that it plans to change its Mac operating system to make it more obvious when AI agents ask to access all of the data on Macs. Some users have criticized Meta's (META.O), opens new tab Muse, an AI agent capable of
[7]
Amid AI Agent Fears, Apple Restricts Full Disk Access
AI agents are becoming much more widely used than ever before, but a good chunk of consumers still have fears about giving agents too much responsibility and access to their personal data. Apple is now set to roll out an update that could potentially reduce some of the risk of giving an AI agent
[8]
Apple sounds the alarm on AI agents and 'Full Disk Access' - Engadget
Apple is adding new safeguards to how "Full Disk Access" works in macOS to address the growing risk posed by AI agents. In an update, the company warned that the increasingly popular tools "could put users at risk," and that it would add "additional controls" to the process to ensure users are
[9]
Apple adds Full Disk Access controls on Macs because of AI agents
Apple named no app and gave no date. The setting was built for backup software, and Apple says some developers now use it in ways that expose mail, messages and browsing history. Apple will add new controls to Full Disk Access on the Mac. Users will only be able to give an app that level of access
[10]
Apple tackling Full Disk Access on Mac is crucial, but it must avoid one mistake
We've seen a number of examples of why giving Meta's Muse app full disk access to your Mac is a very bad idea, and yet another major privacy issue has recently been discovered. It's now been found that Muse analyzes your communication with everyone in your life on an hourly basis. Apple is rightly
[11]
Apple tightens macOS Full Disk Access controls as AI agents proliferate
It was originally conceived as a way for apps to be able to fully back up and restore your hard drive, but developers have since used it as a shortcut for auto-updating apps, managment apps, among others. On my Mac, the Adobe Creative Cloud updater wants this permission, as does the Logitech
[12]
Apple Announces 'Full Disk Access' Changes on macOS Due to AI Agents
In a post on its developer news website today, Apple announced that it will be introducing "additional controls" for the "Full Disk Access" setting on macOS due to new risks posed by AI agents. This announcement comes amid the rise of always-on AI agents like Meta's Muse and OpenAI's Dots, which
[13]
Apple will start limiting Mac disk access for developers due to risk of AI agents
* Full Disk Access was introduced for system-wide backups, but agentic AI has introduced a new threat * Apple has confirmed it will be "introduc[ing] additional controls" to protect sensitive data * No word on when the changes could apply - no signs for macOS 27.2 just yet Apple has announced
[14]
Apple will update Mac permissions to protect users from AI agents accessing their data
Apple is going to roll out update to "Full Disk Access" as a result of AI agents. Credit: Adam Gray/Bloomberg via Getty Images Apple has just been forced to respond to the flurry of AI agent apps, like Meta's Muse, which are accessing Mac users' private data. According to Apple, the company will
[15]
Apple says it's tightening macOS privacy controls amid the rise of AI agents
Amid the rapid rise in AI agents requesting "Full Disk Access" to your Mac, Apple says it is making changes to macOS to protect user privacy. While the company hasn't shared specifics, Apple says users should understand what it means to give an app such "extraordinary" access to their Mac. In a
[16]
Apple Wants to Make It Harder to Run Agentic AI on Your Mac
While details are slim, Apple criticized app developers for asking users to give Full Disk Access without understanding the implications and risks. It appears agentic AI is all the rage: OpenAI's new agents, "Dots," rolled out this week, while Meta's Muse just passed five million downloads. Rather
[17]
Apple Mac privacy controls: Apple to tighten Mac data controls in guard against AI agents
The iPhone maker will introduce additional controls to ensure that users who want to grant an app "Full Disk Access" -- meaning full access to their system files, mail, messages and browsing history -- can only do so "with very explicit user action," it said in a statement Friday. Apple Inc. said
[18]
Apple Takes Aim at AI Agents, Wants Mac Users to Know When Their Data Is Accessed as Meta Tackles Muse Pr
Apple Inc. (NASDAQ:AAPL) plans to update macOS to notify users whenever AI agents attempt to access their system data. The move follows criticism over the use of AI agents, such as Meta Platforms Inc.'s (NASDAQ: META) Muse, which carries out complex tasks and has been accused of accessing private
[19]
Apple says it will flag AI requests for Mac data after Meta's Muse draws complaints
Apple announced plans to change its Mac OS to provide better security against AI agent access. This decision comes after complaints about Meta's Muse accessing private user data without consent. Users were concerned that some developers misuse the Full Disk Access feature to access sensitive
[20]
Apple Makes It Tougher for AI Agents to Access Macs | PYMNTS.com
In a Friday (Oct. 2) blog post, the company noted that Macs feature a "Full Disk Access" option that lets apps access all the data on a machine, with a user's consent. However, some developers "are using Full Disk Access in ways that could put users at risk, exposing everything on their systems --
[21]
Apple Tightens 'Full Disk Access' on macOS Over Growing Risk From AI Agents
Whether it was concerns over Meta's Muse or OpenAI's ChatGPT, Apple's actions reiterate their USP of data privacy All it took Apple to clamp down on Meta's Muse with additional controls was one journalist claiming that the app on a Mac had read through private messages. Though Meta disputed the
[22]
Apple to add stricter consent for apps seeking full Mac access after Meta's Muse privacy dispute - MEDIANAMA
Apple said it will introduce additional controls in macOS to ensure users who "genuinely wish to grant an app this extraordinary level of access can only do so with very explicit user action." The company said in a developer post on October 2. Apple named AI agents as a key reason. It did not say
[23]
Apple Tightens Mac Privacy Controls Over AI Agents & Apps
The company said users who want to give an app 'Full Disk Access' will need to take 'very explicit user action' before granting the permission. The setting can provide access to system files, mail, messages, and browsing history. Apple is planning new privacy controls for Mac users, focusing on
[24]
Apple to flag AI requests for Mac data after Meta's Muse complaints By Investing.com
Investing.com -- Apple (NASDAQ:AAPL) said it plans to change its Mac operating system to make it clearer when artificial intelligence agents request access to all data stored on a computer, Reuters reported Friday. The move follows complaints about Meta Platforms' (NASDAQ:META) Muse AI agent,
[25]
Apple says it will flag AI requests for Mac data after Meta's Muse draws complaints
SAN FRANCISCO, Oct 2 (Reuters) - Apple said on Friday that it plans to change its Mac operating system to make it more obvious when AI agents ask to access all of the data on Macs. Some users have criticized Meta's Muse, an AI agent capable of carrying out complex tasks like canceling unused
Share
Copy Link
Apple announced new restrictions on macOS Full Disk Access permissions following controversy over Meta's Muse AI agent accessing private messages without clear user consent. The company warns that AI agents pose growing privacy risks as they gain autonomous capabilities and access to sensitive user data.
Apple Introduces Stricter Controls for Full Disk Access on macOS
Apple has announced plans to introduce stricter controls for Full Disk Access on macOS, responding directly to growing privacy risks posed by AI agents. The company stated that some developers are using Full Disk Access in ways that expose files, mail, Apple Messages, and browsing history without users' full knowledge and understanding
1
2
. Going forward, Apple will require "very explicit user action" before granting apps this extraordinary level of access to system files and sensitive user data3
.The timing of this announcement is significant. It comes just two weeks after Inc. columnist Jason Aten reported that Meta's Muse AI agent sent him an unsolicited notification referencing a private thread between him and a co-worker over Apple Messages, despite claiming he never granted such permissions
1
. The incident sparked widespread concern on social media about AI-driven privacy challenges and whether users truly understand what they're authorizing when they enable macOS privacy settings for AI agents.Meta Muse Controversy Highlights AI Agent Data Access Concerns
Meta CTO David Singleton pushed back against Aten's claims, insisting that Muse's Messages integration is entirely opt-in and requires two separate permissions: macOS system-level Full Disk Access and enabling a Messages connector setting within Muse
1
3
. However, macOS security expert Patrick Wardle questioned this denial, explaining that from a technical standpoint, any app with Full Disk Access can read non-root files including browsing history, browser cookies, and chats1
.When pressed about how Muse couldn't read messages with Full Disk Access enabled while every other app with that privilege could, Meta's PR team only repeated Singleton's statement without providing technical clarification
1
. Apple's new announcement appears to contradict Singleton's denial, stating explicitly that developers are exposing everything on users' systems without proper informed consent2
.Growing Security Concerns and AI Agent-Related Vulnerabilities
The decision to limit Full Disk Access also follows multiple security incidents involving AI agents. Patrick Wardle disclosed a zero-day exploit in Muse's Mac app that allowed any app or terminal command to obtain access to the authentication token for a user's Muse account
5
. This vulnerability could let unprivileged local processes redirect Muse's dictation traffic and abuse the trust granted to the app, potentially capturing dictated audio, injecting malicious prompts, and accessing resources Muse had been granted5
.Additionally, Wardle reported another vulnerability tracked as CVE-2026-100754 in OpenAI's ChatGPT Mac app that could have enabled attackers to take over the AI assistant and gain unauthorized access to chat logs and other data
5
. A Wired report also cited flaws in the ChatGPT Mac app that could allow hackers to access sensitive data2
. These incidents demonstrate how the privileged position of AI agents and their extensive data collection capabilities can expand the attack surface for malicious actors.Related Stories
Understanding Full Disk Access and Its Implications
Full Disk Access was introduced in macOS Mojave to give users greater control over which applications can access their entire system
5
. The setting was designed primarily to allow backup apps to function properly on Mac by bypassing certain security restrictions3
5
. Once enabled for an application, it allows that program to read and write system files that apps are typically restricted from accessing, including data from Mail, Messages, Safari, and Time Machine backups5
.Apple acknowledged that Full Disk Access "largely sidesteps" privacy controls designed to safeguard users' private data
3
5
. For communication apps specifically, this level of access can compromise not just the user's privacy but also the privacy of everyone they communicate with1
5
.Future Implications as AI Agents Become More Autonomous
Apple emphasized that addressing these risks from AI agents is critical because "as AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially"
1
2
4
. The company committed to ensuring users clearly understand these security concerns before granting such access so they can make informed decisions about their own data and privacy1
5
.While Apple didn't provide an exact timeline for rolling out the new controls or specify how they'll work technically
3
4
, the announcement signals a broader industry reckoning with AI agent capabilities. Amazon has already blocked Muse from its platform, stating that such apps "should operate openly and respect service provider decisions about whether or not to participate"1
.Users concerned about their current Full Disk Access settings can check which apps have this permission by navigating to System Settings > Privacy & Security > Full Disk Access and toggling it off if necessary
4
. The incidents surrounding Meta Muse suggest that even careful configuration may not fully protect user data, highlighting why Apple's intervention with stricter controls for Full Disk Access is necessary to address these AI-driven privacy challenges.References
Summarized by
Navi
[2]
Related Stories
Meta's Muse AI Agent Could Strip $10 Billion From Apple's Services Revenue, Analysts Warn
30 Sept 2026•Business and Economy
Apple Introduces Strict App Store Guidelines Requiring Disclosure for Third-Party AI Data Sharing
14 Nov 2025•Policy and Regulation
Microsoft clarifies Windows 11 AI agents need explicit permission before accessing your files
17 Dec 2025•Technology
Recent Highlights
1
AI Uncovers Critical PHP Vulnerability Affecting 70% of Websites as Hackers Launch Attacks
Technology
2
OpenAI AI Models Hacked Crypto Wallet, Breached Government Sites in Unauthorized Activities
Technology
3
OpenAI AI agents turned off safety monitoring during routine tasks, then lied about it
Technology
Recent Highlights
Today's Top Stories
Don’t drown in AI news. We cut through the noise - filtering, ranking and summarizing the most important AI news, breakthroughs and research daily. Follow topics that matter to you and stay ahead.
