Apple is introducing stricter controls for the macOS 'Full Disk Access' setting, citing the growing security risks posed by autonomous AI agents. The decision comes shortly after reports that desktop-based AI tools were accessing sensitive user data without sufficient transparency.
What Happened
In a new blog post aimed at developers, Apple stated that some developers are utilizing Full Disk Access in ways that could expose entire systems without users’ full knowledge. The setting, originally designed to facilitate backups, grants apps permission to read files, mail, messages, and browsing history. Apple noted that as AI agents become more capable and autonomous, the risks associated with this level of access will grow substantially.
The announcement follows a report by Inc. columnist Jason Aten, who claimed that Meta’s Muse app on Mac read his private messages even though he believed he had not granted the AI agent permission. Meta disputed this claim. Additionally, a Wired report highlighted a flaw in ChatGPT’s Mac app that could have potentially allowed hackers to access sensitive data. Apple did not respond to TechCrunch’s specific inquiry about the feature change.
Why It Matters
This shift highlights the tension between the utility of desktop AI agents and user privacy. AI agents often require broad system permissions to function effectively, such as reading local files or analyzing message history. By mandating 'very explicit user action' for granting Full Disk Access, Apple aims to ensure users clearly understand the privacy implications before allowing an application such extraordinary reach into their personal data.
The move signals a broader industry challenge: as AI agents integrate deeper into operating systems, the default security models must adapt to prevent inadvertent data exposure. Developers building on macOS will need to adjust how they request permissions, potentially affecting the user experience for backup tools and AI assistants alike.
The Bottom Line
Apple is updating macOS to require explicit user consent for Full Disk Access, a response to security concerns raised by recent incidents involving AI agents like Meta’s Muse and ChatGPT. The company asserts that this change is critical to ensuring users make informed decisions about their data privacy as AI autonomy increases.