Apple Tightens Mac Disk Access as AI Agents Raise the Stakes

Apple is changing how Macs hand out one of their most powerful permissions. In an update published Friday, the company said it is rolling out new controls around "full disk access" so that users who genuinely want to give an app that "extraordinary level of access" can only do so through "very explicit user action." TechCrunch reported the move first.

The reasoning is simple. Full disk access lets an app read data across the whole machine, including files and databases that are normally walled off from other software. That was already a sensitive grant. Apple's argument is that AI agents, which are built to roam through files, run tasks and act on a user's behalf, make the downside far bigger. An agent with broad access can touch far more, and do it far faster, than a traditional app.

The timing is notable. Only weeks ago, Inc. writer Jason Aten reported that Meta's Muse AI appeared to know the contents of his messages, even though he said he had not explicitly allowed the chatbot to access them on his iPhone or Mac. Meta spokesperson Andy Stone disputed that account, saying access to Messages is "entirely opt-in." Apple's announcement does not name Meta or Muse, and it is not clear whether that episode directly prompted the change.

Still, the dispute shows the core tension. As AI assistants ask for deeper access to personal data, it gets harder for users to tell what they have approved, and what an app can actually see once a broad permission is switched on. Apple's answer is to make the highest tier of access harder to grant by accident and easier to understand when it is granted on purpose.

Apple has not detailed in the summary available here exactly what the new prompts or settings flows will look like, or when every Mac user will see them. The company's framing, though, signals a clear direction. Permissions that were designed for backup tools, security software and system utilities are now being requested by a new class of apps, and the operating system is expected to act as the gatekeeper.

For developers building agent-style tools on macOS, the practical takeaway is that a quick click-through will no longer be enough to get the broadest level of access. Apps that lean on full disk access may need to justify it more clearly, or rework their design to ask for narrower permissions instead.