Apple will soon force Mac users to decide which AI assistants can see their entire system, after a controversy involving Meta’s Muse showed how badly that trust can break down.
The company announced it will add new controls to “Full Disk Access,” the setting that lets apps roam freely across a Mac’s files, emails, messages, and browser history. From now on, Apple says, Mac users will see explicit prompts asking whether they want to grant a specific app that kind of power. The move comes directly in response to the rise of AI agents like Muse, which recently passed 5 million downloads.
Full Disk Access Explained
On a Mac, some apps need broad powers to work at all. A backup app, for instance, needs to touch files, emails, and settings across the whole system. Apple allows these apps to request Full Disk Access to keep things simple.
But AI agents are different. They run on their own, and they can act on behalf of the user without constant supervision. That autonomy adds a layer of risk that a simple backup app never had. An app that backs up files knows what it is doing. An app that reads your messages and acts on them might not.
The Muse Controversy
Jason Aten, an Inc. columnist, found this out the hard way. He discovered that Meta’s Muse AI assistant had synced his entire local Messages database and was using those messages as context for its tasks. Aten claims he denied giving Muse permission to access Messages. Meta pushed back, saying it is impossible for Muse to do so if Aten declined providing Muse with these permissions.
The dispute shows how easily trust can break down when an app holds a key to the whole system. Apple’s new controls aim to stop that kind of confusion before it starts.
What the New Controls Will Do
The new controls will force apps requesting Full Disk Access to prompt the user for explicit permission. The user will see exactly which app is asking for which power, and they will have to confirm before anything happens. That means a Muse-style sync cannot happen without the user’s clear, recorded consent.
Apple is doing this because it believes developers are using Full Disk Access in ways that put users at risk. The company says some developers expose everything on a system — files, mail, messages, browsing history — without users’ full knowledge and understanding. The new controls are meant to stop that.
“We are committed to ensuring users clearly understand these risks before granting such access, so they can make informed decisions about their own data and privacy.”
The quote comes from Apple’s full update. It frames the change as a protection, not a restriction. Apple is not banning Full Disk Access. It is simply making sure users know what they are agreeing to.
Why This Matters
The Muse controversy made the problem visible. Now Apple is acting on it. The company says the risks will grow substantially as AI agents become increasingly capable and autonomous. That is a fair warning.
The change also puts Apple in line with a broader trend. Privacy controls are becoming standard, not optional, across consumer technology. Users expect to see what an app is doing before they let it in. Apple’s move respects that expectation.
The Limits of the Change
The new controls will help, but they are not a cure-all. A user who clicks through a prompt still has to trust the app behind it. The prompt only tells the user what the app can do. It does not guarantee the app will behave well.
There is also the question of scale. Muse has 5 million downloads. Apple will need to balance security with usability. Too many prompts and users will start clicking through without reading. Too few, and the point is lost.
None of this answers the underlying question of whether an AI assistant should have access to a user’s entire system. Apple’s update does not settle that. It just makes sure the user sees the question before answering it.
What Comes Next
Apple has not said when the update will arrive. The company has posted its statement, but the feature itself is still in development. Users should expect to see the prompts in the near future.
For now, the best advice is to pay attention. When an app asks for Full Disk Access, read the prompt carefully. Know what you are agreeing to before you confirm. That is the whole point of the change.
The Verdict
Apple is doing the right thing here. The Muse controversy showed the dangers of silent trust. Explicit prompts remove that silence. Users will know exactly what they are approving.
The move is also consistent with Apple’s stated commitment to user privacy. The company has spent years building controls around data access, and this update extends that work to a new category of app. It is a small step, but it is the right direction.
The risks of AI agents will grow. Apple is preparing for that growth. The company is committing to transparency, and that is a good sign for everyone who uses a Mac.
Muse may have reached 5 million downloads, but it also reached a turning point. Apple has responded, and the Mac platform is better for it.
Source material: “Apple will update Macs to protect users from AI agents with full disk access,” Mashable.
Get the Notebook.
The day's best stories and every fresh verdict, in plain English, in your inbox by seven. One email a day, no more.