Apple Updates macOS Full Disk Access to Address AI Agent Privacy Concerns

Apple announced plans to overhaul macOS Full Disk Access permissions following user complaints and privacy concerns over Meta’s Muse. The upcoming updates will require explicit user action before third-party artificial intelligence agents can read protected personal files, messages, and browsing histories across Mac computers.

The privacy debate intensified when tech columnist Jason Aten reported that Meta’s Muse AI agent demonstrated knowledge of private Apple Messages threads. Aten maintained that he had never granted the application Full Disk Access, igniting widespread online discussion about the autonomy granted to desktop assistant software.

https://x.com/andymstone/status/2105106775259128080

Meta Disputes Unauthorized Access Claims as Industry Scrutiny Mounts

Meta representatives pushed back against the allegations surrounding its software. Meta CTO David Singleton and Meta spokesperson Andy Stone insisted that the assistant operates strictly on an opt-in basis, requiring manual configuration from the user.

“The Messages integration in the Muse Mac app is opt in. Your Muse can only read Messages content if macOS system-level Full Disk Access is granted and the Messages connector is enabled.”
David Singleton, Meta CTO, via Ars Technica

Stone added via social media that the permission can be revoked at any time. Security experts examining the incident, including macOS security researcher Patrick Wardle, noted that operating system architecture makes any non-root file readable once broad system permissions are active, fueling an ongoing debate over desktop security trade-offs.

How macOS Full Disk Access Creates New Vulnerabilities for AI Agents

Unlike Apple’s iPhones and iPads, which enforce strict application sandboxing by default, Mac computers offer greater operational flexibility. The Full Disk Access setting was originally engineered to allow backup software to inspect files across a machine properly.

However, modern assistant applications like OpenClaw, Dots, Claude Cwork, and Hermes Agent frequently request broad system privileges to perform complex autonomous chores. These tasks include sorting mail, haggling for better prices, managing calendars, and canceling unused subscriptions.

Apple Updates macOS Full Disk Access to Address AI Agent Privacy Concerns — Photo: TechCrunch

“Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems—including files, mail, messages, and even browsing history—without users’ full knowledge and understanding.”
Apple, via Engadget

Apple Adds Controls for Explicit User Consent

Responding to these security challenges, Apple stated that it will implement additional controls to protect consumer privacy. The Cupertino company emphasized that autonomous software capabilities are expanding rapidly, increasing the potential dangers tied to deep system access.

“Going forward, we will introduce additional controls to ensure that users who genuinely wish to grant an app this extraordinary level of access can only do so with very explicit user action.”
Apple, via Reuters

While Apple did not disclose a specific release timeline or technical implementation details for the upcoming software modifications, the announcement signals an industry-wide pivot toward tighter vetting of desktop utilities capable of inspecting private files.