Apple says it is tightening controls over “Full Disk Access” in macOS due to new risks posed by AI agents.

Just days after a reporter claimed that Meta’s Muse app for Mac was reading their private messages—a claim Meta denied—Apple announced it would introduce additional controls for the “Full Disk Access” setting in macOS. Apple stated that while the feature was designed to ensure backup functions operate correctly, the emergence of AI agents has increased the risks associated with this level of access.
Apple’s announcement followed a report by Inc. magazine columnist Jason Aten, who revealed that the AI assistant Muse was aware of the content of his private messages, even though Apple claimed it had not authorized the app to access such information. The report raised concerns regarding the security and trustworthiness of desktop AI, given that such systems can control various functions and access user files and messages.
The decision to restrict Mac functionality follows a Wired report revealing a vulnerability in ChatGPT’s Mac app that could potentially allow hackers to access sensitive data.
AI agents running on the desktop allow users to adjust macOS settings, granting specific applications broader access to files, messages, and other personal content stored on their computers.
Take Muse, for example: its AI features allow users to selectively enable “Full Disk Access.” Apple explains that this setting grants an app permission to access files, email, messages, and even browsing history.
In a blog post aimed at developers, Apple stated: “Some developers are using Full Disk Access in ways that compromise user security, exposing everything on a user’s system… without the user’s knowledge.”
The company announced plans to introduce new controls ensuring that users who “truly wish to grant an app this extraordinary level of access” can only do so through “a very explicit user action.”
Apple stated: “Addressing this issue is critical. As the capabilities and autonomy of AI agents grow, the risks associated with this level of access will increase significantly. We are committed to ensuring users fully understand these risks before granting such access, enabling them to make informed decisions about their data and privacy.”
Apple did not respond to TechCrunch’s inquiries regarding the changes to this feature.