Apple has introduced new safeguards to restrict AI agents’ access to Macs by tightening Full Disk Access
permissions, citing risks posed by developers who may not fully inform users about data exposure. The changes, announced on October 2, 2026, require very explicit user action
to grant apps broad system access, with the company warning that AI agents’ growing autonomy increases privacy risks.
The update, detailed in a blog post, addresses concerns that some AI developers are exploiting Full Disk Access
to bypass macOS privacy controls, potentially exposing files, messages, and browsing history without users’ full understanding. Apple emphasized that the new measures aim to ensure users clearly understand these risks before granting such access.
Tighten Access Controls
Under the revised policy, users will only be able to grant extraordinary level of access
to apps through very explicit user action,
according to Apple’s statement. This follows reports that AI agents like Meta’s Muse and OpenClaw’s Dots encourage users to enable Full Disk Access, allowing these apps to access sensitive data such as messages and files. Apple’s support documentation clarifies that apps with this permission can access all files, Mail, Messages, Safari, and administrative settings across the Mac. That’s why some people choose to run agents on separate devices, which has helped fuel Mac Mini shortages this year.
The company’s move comes amid disputes over how AI agents handle user data. Meta disputed this, stating that users must explicitly enable both Full Disk Access and the Messages connector for Muse to read messages.
Focus on Meta’s Muse
Meta’s AI agent, Muse, has been a focal point of the debate. Aten claimed the app synced 187,000 rows of message history on his Mac despite his denial of Messages access. Meta’s spokesperson, Andy Stone, countered that Muse requires both Full Disk Access and the Messages connector to function, asserting that users must opt in explicitly. You have to enable both Full Disk Access and the Messages connector for Muse to be able to read your Messages content,
Stone wrote on social media platform X. It can’t read your Messages unless you do this. And it can be revoked at any time.
Apple’s blog post reiterated that as AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially.
The company declined to specify when the update would roll out or what the exact changes would entail, leaving users to await further details. Engadget noted that macOS 27, released on September 14, 2026, does not include the new controls, suggesting the update is still in development. According to Apple’s support page, an app with the permission can open all files on the computer, data from Mail, Messages, Safari and Home, Time Machine backups, and certain administrative settings for all users on the Mac.
Unclear Details Remain
While Apple has outlined its intent to strengthen privacy protections, several details remain unclear. The company has not yet named a specific macOS version or release date for the update, nor has it described the exact very explicit user action
required to grant Full Disk Access. PYMNTS reported that such disputes highlight broader concerns about AI agents’ data practices, with Apple framing its changes as a response to these risks.
Users currently seeking to manage Full Disk Access can check their system settings, where they can toggle the permission for apps. As the debate over AI privacy continues, the upcoming changes underscore the tension between functionality and security in an era of increasingly autonomous software.
ethan.brook News Editor