What Full Disk Access actually gives an app
Full Disk Access (FDA) is a macOS permission that goes back to macOS Mojave, back in 2018. It was created for a very specific job: letting backup tools read your entire disk. The catch is that FDA largely bypasses Apple's normal per-app privacy controls — the system that usually gates Camera, Microphone, Photos and other sensitive resources one app at a time.
With FDA granted, an app can reach into Mail, Messages, Safari history, contacts, photos and Time Machine backups. For a backup utility, that is the job description. For an always-on AI agent, it is essentially the entire surface area of your digital life.
Why AI agents changed the risk calculation
On October 2, 2026, Apple announced it would tighten the controls around FDA, explicitly citing the risks of autonomous AI agents — the first time a major operating system vendor has updated core permissions because of agents rather than malware.
Apple's framing is careful but blunt. The company said some developers are using Full Disk Access in ways that could put users at risk, exposing files, mail, messages and even browsing history without users fully understanding what they granted. For communication apps, Apple noted, it can also compromise the privacy of the people you talk to — not just your own.
The logic is straightforward: as agents become more capable and autonomous, the risks of this level of access "will grow substantially," in Apple's words. A permission designed for software that backs up your drive was never meant for software that acts on your behalf all day.
What Apple is actually changing
This is a consent change, not a ban. Going forward, Apple says it will "introduce additional controls to ensure that users who genuinely wish to grant an app this extraordinary level of access can only do so with very explicit user action." In practice, that means clearer, more deliberate prompts — users will have to take a clear and specific action before a third-party app gets that deep into the system.
Apple has not said when the new controls will ship. The announcement came through an Apple Developer News post titled "Updates to Full Disk Access in macOS," aimed at developers who will need to prepare for the stricter flow.
The Muse dispute and the ChatGPT Mac flaw
The timing was not accidental. The move came after a wave of agentic apps raised alarms: Inc. columnist Jason Aten claimed Meta's Muse Mac app surfaced content from Apple Messages, a claim Meta disputed. Separately, Wired had reported on a ChatGPT Mac flaw that could have exposed sensitive data. Neither episode is settled as a finding in Apple's announcement — but together they explain why Apple is talking about agent-era risk now, not later.
What Mac users should do
For now, nothing changes on your Mac — the new prompts are forward-looking. But the announcement is a good reminder to open System Settings, go to Privacy & Security, and actually look at which apps hold Full Disk Access. If an app you barely remember has the keys to your entire digital life, that is worth a second thought.
The bigger picture is that this is unlikely to stop with Apple. Late in 2025, Microsoft made a similar move on Windows 11, reversing broad default folder access for its Agent Workspace feature after user backlash. Operating systems spent the last decade building permission walls against malware; now they are being rebuilt for a world where the risk is software that helps a little too eagerly.
Are AI agents worth trusting with that much access, or is Apple right to slow things down? Share your take below.
Comments
Post a Comment