Apple has acknowledged that some developers are abusing a powerful Mac permission to see everything on a user’s system, and the company says it plans to add new controls to stop it.
The admission comes in a post titled “Updates to Full Disk Access in macOS,” dated October 2, 2026. The post describes a permission called Full Disk Access that allows backup apps to work properly on the Mac. But it also says some developers are using that same permission in ways that expose files, mail, messages, browsing history, and even the privacy of the people users are communicating with.
Here is the breakdown of what Apple said and what it means for anyone who uses a Mac.
What Full Disk Access Actually Does
Full Disk Access is a permission in macOS that is designed for backup software. Backup apps need to scan files across the whole system to do their job, and Full Disk Access allows them to function properly.
But the permission is broad enough that it also lets an app see everything else on the system. That includes personal files, emails, messages, and web browsing history. Apple’s post says developers are using it in ways that expose all of that without users fully understanding what they are agreeing to.
The post warns that this kind of exposure affects communication apps in particular. When a messaging app has Full Disk Access, it can potentially see the private communications of everyone a user contacts.
The New Controls Apple Is Building
Apple says it is adding new controls to make sure users can only grant Full Disk Access through very explicit actions. The idea is that users should have to confirm the permission request in a way that shows they know what they are doing.
The post frames this as a necessary step because AI agents are becoming more capable and autonomous. That means the consequences of giving an app Full Disk Access could grow larger over time. Apple wants users to understand the risks before they agree.
“For communication apps, this can also compromise the privacy of the people users are communicating with.”
Why This Matters Now
The timing of the post suggests Apple is responding to developer behavior. The post describes some developers using Full Disk Access in ways that could put users at risk, which implies the company is concerned about the direction things are headed.
Apple’s description of the problem is blunt. Developers are exposing everything on a system without users’ full knowledge and understanding. That is a serious privacy concern, and Apple is treating it as one.
The post also connects the permission to communication apps specifically. A messaging app with Full Disk Access could see the messages of every person a user talks to. That is a privacy breach that goes beyond the user who granted the permission.
What Users Should Watch For
Until Apple’s new controls arrive, users need to be careful about which apps they grant Full Disk Access to. The permission is powerful, and the post makes clear that some apps are asking for it without making the risks fully clear.
Users should check their settings and revoke any permissions they no longer want. They should also think twice before granting an app access to their entire file system.
The post does not say when the new controls will arrive. It only says Apple is committed to building them.
The Broader Context of App Permissions
Full Disk Access is a powerful permission on a Mac, and Apple is now addressing a concern around it. The permission has existed for years, and the post describes a situation where developers are using it in ways that could put users at risk.
The post does not describe previous controls Apple has built around app permissions, nor does it mention the App Store or Notarization.
What Apple Has Said So Far
Apple’s post is a public acknowledgment of a problem it says exists. The company has not released a patch or a timeline. It has only said it is working on new controls.
The post also makes a broader point about AI autonomy. Apple sees the growing capability of AI agents as a reason to tighten controls now, before the risks get bigger.
The company is committed to ensuring users clearly understand these risks before granting such access, so they can make informed decisions about their own data and privacy.
Key Facts Box
- Post date: October 2, 2026
- Permission: Full Disk Access in macOS
- Affected apps: Backup apps and communication apps
- Risk: Exposure of files, mail, messages, browsing history, and communication privacy
- New controls: Coming from Apple, requiring explicit user action
Apple has acknowledged a problem, described it clearly, and promised a fix. The next step is for the company to deliver those controls.
Source material: “Updates to Full Disk Access in macOS,” Apple.
Get the Notebook.
The day's best stories and every fresh verdict, in plain English, in your inbox by seven. One email a day, no more.