Apple is making it harder for apps to see everything on your Mac. The company says it is rolling out new controls for “full disk access,” a permission that lets apps read files, emails, messages, and browsing history across an entire system. The move comes after a developer found that Meta’s Muse AI could read his private messages without his explicit permission.
The change follows a report by Inc’s Jason Aten, who discovered that Meta’s Muse AI knew the contents of his messages on both his iPhone and his Mac. Aten did not give Muse explicit permission to access those conversations. Yet the information still got through. Now Apple is responding directly to that incident, saying the risks of full disk access will grow “substantially” as AI agents become more capable.
The Scope of Full Disk Access
Full disk access is a permission built into macOS. When an app requests it, the system grants that app access to nearly everything stored on the computer. That includes files, emails, messages, and browsing history. Apple says the feature “largely sidesteps” privacy controls offered to users “to allow backup apps to function properly on Mac.”
That exception is worth noting. Backup apps need to read large amounts of data, and full disk access makes that possible. But the permission applies to far more than backups. Any app that requests it can see almost everything a user has stored.
The problem, Apple now says, is that some developers are using full disk access in ways that expose users without their full knowledge or understanding. The company warns that as AI agents become more capable and autonomous, the risks associated with this level of access will grow substantially.
How Muse Got Into Aten’s Messages
Aten’s discovery came from a simple observation. He had not given Muse explicit permission to access his messages. Yet the AI knew what was in those conversations. The finding drew attention because it showed a gap in what users think they control.
Meta’s Andy Stone pushed back on the report, saying access to Messages is “entirely opt-in.” Stone added that you have to “enable both Full Disk Access and the Messages connector for Muse to be able to read your Messages content.”
That response matters. It means Muse cannot read messages on its own. But it also means that users who enable full disk access and connect their Messages account to Muse are handing over broad permissions without necessarily understanding what they are doing.
Apple’s new controls are designed to close that gap. Users will have to take explicit action to grant full disk access, rather than simply clicking through a prompt. The company wants to ensure that the decision to hand over this level of access is made with full knowledge and intent.
What Apple Is Actually Changing
Apple is adding new controls to “ensure that users who genuinely wish to grant an app this extraordinary level of access can only do so with very explicit user action.” The company did not say when the update will roll out. It also did not immediately respond to The Verge’s request for comment.
The key phrase is “very explicit user action.” That suggests a prompt that cannot be bypassed by a single tap. It might require multiple steps, a password, or a confirmation dialog that clearly states what is being granted. The goal is to prevent accidental or careless granting of access.
Apple’s warning about growing risks is notable. The company is not just reacting to a single incident. It is looking ahead at a future where AI agents are more capable and more autonomous.
The Developer Warning
Apple’s statement targets developers directly. The company says some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems — files, mail, messages, and even browsing history — without users’ full knowledge and understanding.
The warning is specific about what developers are doing wrong. Apple is concerned about developers using the permission in ways that expose users without their full knowledge or understanding. The update is aimed at correcting that behavior.
What Users Should Expect
Users should expect a different experience when installing apps. Instead of a single prompt, they will see a more involved process. Apple wants to make sure the decision to grant full disk access is deliberate, not automatic.
The change applies to Mac apps. The update is specific to macOS.
| Permission | What It Grants |
|---|---|
| Full disk access | Files, emails, messages, browsing history |
| App permissions | Specific features |
The table shows the scope of the problem. Full disk access is a single permission that covers nearly everything on a system. It is broad, and it is easy to grant accidentally. Apple’s update aims to narrow that gap.
The Verge’s Request for Comment
The Verge asked Apple for comment on the update. The company did not immediately respond.
Apple’s warning about growing risks is also worth noting. The company is not just reacting to a single incident. It is looking ahead at a future where AI agents are more capable and more autonomous.
What We Make of This
Apple’s move is a sensible response to a real problem. Full disk access is a powerful permission. It should not be granted lightly. By requiring explicit user action, Apple is making the default safer.
The update also signals a broader shift. Apple is treating AI agents as a distinct category of software. These programs are not like regular apps. They are autonomous, capable, and they want to do things users might not expect. Apple’s warning about growing risks is a recognition that these agents are changing the landscape.
There is room for improvement. The details of the new controls have not been shared. Apple has not said what explicit action will look like. Users will have to wait for the update to see how it works in practice.
But the direction is clear. Apple is making it harder for apps to see everything on your Mac. That is a good thing.
The question is whether it is enough. AI agents are becoming more capable, and their appetite for data will grow. Apple’s update addresses the current threat. It does not solve the future one.
Apple is tightening full disk access controls after Inc’s Jason Aten found Meta’s Muse AI had accessed his Messages without permission. The danger of letting apps roam freely across a user’s entire system has been exposed. Apple is responding, and the change is overdue.
Source material: “Apple will limit Mac disk access as AI agents ‘substantially’ increase risk,” The Verge.
Get the Notebook.
The day's best stories and every fresh verdict, in plain English, in your inbox by seven. One email a day, no more.