Mac apps will soon need very explicit user action before they can gain full disk access, Apple says.
Apple will add new limits to full disk access on macOS, the permission that lets an app reach a user’s entire system. The company says apps will soon need very explicit user action before they can gain that level of access, and the company ties the change to risks posed by increasingly capable and autonomous AI agents.
The change follows reporting by Inc’s Jason Aten, who found that Meta’s Muse AI knew the contents of his messages even though he never gave the chatbot explicit permission on his iPhone or Mac. Meta spokesperson Andy Stone disputed that account, saying access to Messages is entirely opt-in and requires enabling both full disk access and the Messages connector.
For builders, the shift means any Mac app that reads mail, messages, files, or browsing history will face stricter permission flows. Apple’s language targets agents that act on their own, so teams shipping automation features should document exactly why they need system-wide read access and prepare for prompts that users must approve by hand.
Apple has not said when the update will ship, and the company did not immediately respond to a request for comment. Developers should watch macOS beta notes and App Store review guidance for the exact flow, because a stricter gate on full disk access will shape how AI agents read local data on the Mac.
What matters
- Apple will add new full disk access limits on macOS in response to risks from AI agents.
- Builders of Mac apps that read files or messages should expect tighter permission prompts.
- Apple has not said when the update ships, so teams should watch macOS release notes.
Why it matters
Apple has not said when the update ships, so teams should watch macOS release notes.
This GenAI News article was prepared in original wording using reporting and materials published by The Verge. Source reference: https://www.theverge.com/tech/1004295/apple-limit-mac-disk-access-ai-agents.
Drafted by the GenAI News review pipeline.