Apple plans to update macOS permissions so that apps requesting Full Disk Access are easier to spot and harder to approve by accident. The announcement follows user complaints that Meta’s Muse AI agent accessed private messages without explicit authorization.
The privacy changes stem from a growing clash over autonomous software reaching into sensitive corners of desktop computers. On Mac systems, a setting known as Full Disk Access bypasses standard developer controls to let backup software function properly across system files, mail, messages, and browsing history. But as autonomous helpers gain traction, that broad permission has turned into a flashpoint for user data safety.
Meta Denies Muse Accessed Private Messages Without Permission
The friction intensified after Inc. magazine technology columnist Jason Aten reported that Meta’s general-purpose assistant, Muse, sent him an unsolicited notification referencing a private thread between him and a coworker over Apple Messages. Aten maintained that he never granted the assistant permission to read his messages and assumed those personal chats were entirely off-limits.
https://x.com/andymstone/status/2105106775259128080
Meta pushed back hard against those claims. Company executives argued that the application’s access requires deliberate manual setup by the user. The Messages integration in the Muse Mac app is opt in,
Meta Chief Technology Officer David Singleton explained, adding that the software can only read Messages content if macOS system-level Full Disk Access is granted and the Messages connector is enabled.
Meta spokesperson Andy Stone similarly emphasized on social media platform X that users must configure both settings manually and that the permission can be revoked at any time.
Independent security analysts questioned how the mechanics operated in practice. When speaking with reporters, macOS security expert Patrick Wardle noted that technical privileges under Full Disk Access leave virtually all local files, browser cookies, and chat databases readable.
Apple Warns Developers About Risks of Full Disk Access
Facing mounting user concern and widespread online debate about autonomous software acting like an unchecked power tool, Apple intervened. In a public post on its Developer website, the company acknowledged that communication privacy and local file security are increasingly exposed by software operating with minimal human oversight.
Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems—including files, mail, messages, and even browsing history—without users’ full knowledge and understanding. For communication apps, this can also compromise the privacy of the people users are communicating with.
Apple, Developer Notice
Apple did not announce a specific release date or version number for the upcoming security updates. However, the company committed to rolling out distinct guardrails to ensure that granting such broad access requires deliberate human intent.

As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially. We are committed to ensuring users clearly understand these risks before granting such access, so they can make informed decisions about their own data and privacy.
Apple, Developer Notice
Wider Stakes for Mac Utilities and Autonomous Software
The coming modifications carry implications that stretch well beyond artificial intelligence assistants. Observers note that macOS utilities—including popular file launchers, search tools, text selection helpers, and window managers—frequently rely on Full Disk Access to operate smoothly. Restricting or altering how permissions are granted risks changing the daily workflow for a wide variety of third-party Mac applications.
At the same time, the wider technology industry faces heightened scrutiny over autonomous models. Meta’s Muse surpassed 5 million downloads recently, but the rollout has hit several hurdles. In July, Meta scrapped its Muse Image tool amid a backlash over privacy concerns tied to Instagram account linking. Muse also follows a series of disclosures from major tech firms, including Google, Anthropic, and OpenAI, regarding automated systems compromising external websites. Counterpoint Research data shows Apple Mac computer revenue climbed 29 per cent year-on-year during the second quarter alongside a 30 per cent rise in shipments, showing that more users are adapting to changing privacy rules.