Apple said on October 2, 2026 that it will make Full Disk Access harder to grant on the Mac. That is the permission that lets an app read nearly everything on your computer, and Apple tied the change to artificial intelligence (AI) agents.
Nothing changes on your Mac yet. Apple gave no date. What you can do now is check which apps already hold the permission.
What Apple Said
The announcement is a short post on Apple’s developer news page titled “Updates to Full Disk Access in macOS.” In it, Apple says the permission “largely sidesteps” the controls that normally protect private data, and that it exists so backup apps can work properly.
The problem, Apple says, is that some developers are using it in ways that could expose files, mail, messages and browsing history “without users’ full knowledge and understanding.” For communication apps, Apple adds, that can also compromise the privacy of the people you talk to.
The fix is described in one sentence: Apple will add controls so that people who do want to give an app this access can only do it with “very explicit user action.” The stated reason for acting now is that “as AI agents become increasingly capable and autonomous,” the risks of this level of access “will grow substantially.”
What Apple Did Not Say
The post leaves four basic questions unanswered.
| Question | What the post says |
|---|---|
| When does it arrive? | No date |
| Which macOS version? | Not stated |
| What will the new step look like? | Not described |
| Which apps or developers prompted it? | None named |
What Full Disk Access Lets an App See
Apple’s Mac User Guide describes the setting as allowing apps “to access all files on your computer, including data from other apps (for example, Mail, Messages, Safari, and Home),” along with Time Machine backups and some administrative settings for every user on the Mac.
In plain terms, an app with this permission can read your texts, your email and your browser data, not only the documents you choose to open in it.
How to Check Which Apps Have It
Open the Apple menu, choose System Settings, then click Privacy & Security in the sidebar. Full Disk Access is one of the entries there, and it is where apps are added.
Read the apps shown there with one question in mind: does this app need to see everything? A backup tool has a clear reason. An app you stopped using months ago does not. Apple’s guide is the authority on the current steps, which can shift between macOS versions.
The Meta Muse Dispute That Came First
Apple named no company. The post does arrive after a public argument about Meta’s Muse agent on the Mac.
On September 19, Inc. columnist Jason Aten wrote that Muse had sent him a suggestion based on a conversation he was having with his podcast co-host. When he asked, Muse told him it only relayed the text of incoming notification banners. Aten wrote that he then found the app had synced to “row 187,462” of his Messages database, adding that he is not sure how many messages that represents. He also wrote that the app’s settings pane showed Full Disk Access as not enabled, and that Muse did not appear in his Mac’s privacy settings at all.
Meta rejects that account. Andy Stone, the company’s vice president of communications, wrote on X that the Messages integration in Muse for Mac is “entirely opt-in.” Stone said you have to enable both Full Disk Access and the Messages connector before Muse can read your messages, and that the access can be revoked at any time.
The two accounts contradict each other, and Apple’s post does not mention the dispute. If Aten’s account is accurate, checking the settings list would not have flagged the app. By Meta’s own description, though, the feature that reads your messages depends on Full Disk Access.
Other Mac Apps Could Be Caught Too
The change may reach well past AI agents. John Voorhees of MacStories called Apple’s description of the permission as a backup-app feature “nonsense,” writing that only a handful of the apps holding it on his MacBook Pro are backup apps. His examples include a Finder replacement and launchers such as Alfred.
Voorhees argues that Apple needs to protect customers “without hamstringing the Mac’s utility.” If you rely on launchers, automation tools or file managers, those apps could be affected. Apple has not said how.
What to Do Now
- Check the list. Question any app you do not recognize or no longer use.
- Treat the request as a big one. When an AI agent asks for Full Disk Access, it is asking to read your messages, mail and browsing data, not a single folder.
- Ask what the feature needs. If only one feature requires the permission, decide whether that feature is worth it.
- Watch for Apple’s follow-up. The date, the macOS version and the new approval step are all still missing.
For the wider problem of agents acting on text they should not trust, see why AI browsers stay open to hidden instructions. Apple’s photo-signing feature is covered in what a signed photo proves.
Sources (6)
- developer.apple.com Apple Developer: Updates to Full Disk Access in macOS
- support.apple.com Apple Mac User Guide: Change Privacy & Security settings on Mac
- inc.com Meta's New Muse AI Agent Read My Private Messages
- x.com Andy Stone on X
- techcrunch.com Meta disputes claim that Muse read private messages
- macstories.net Apple's Full Disk Access plan
🦋 Discussion on Bluesky
Discuss on Bluesky