AIToday
Large Language ModelsAI Safety & AlignmentTechCrunch AIPublished: Oct 3, 2026, 04:00 JST

Apple tightens Full Disk Access as AI agents raise risk

Apple tightens Full Disk Access as AI agents raise risk

3 Key Points

  1. What happened

    Apple announced new controls for macOS's Full Disk Access setting, after a journalist claimed Meta's Muse app read his private messages and a Wired report cited a ChatGPT Mac app flaw.

  2. Why it matters

    The new controls mean users who genuinely wish to grant this extraordinary level of access can do so only with very explicit user action, Apple said.

  3. What to watch

    Apple did not respond to TechCrunch's inquiry about the feature change, so the timing and exact form of the controls remain undecided. Watch how the "very explicit user action" requirement is implemented for apps like Muse.

WHO IT HITSThis lands on macOS developers whose apps rely on Full Disk Access, and on Mac users who have granted that permission to desktop AI apps. Apple's statement warns such developers that broad access may no longer be granted silently.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, in your inbox every morning.

Context & Analysis

The dispute between Meta and Jason Aten over whether the Muse app had permission to read his private messages is the backdrop for Apple's announcement. Apple's statement also follows a Wired report that cited a flaw in ChatGPT's Mac app that could have allowed hackers to access sensitive data. Those two episodes put a spotlight on how desktop AI agents obtain access to personal content.

Apple's blog post aimed at developers frames the issue as one of user awareness. The company said some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems without users' full knowledge and understanding. Apple's response is to require what it calls very explicit user action before granting that access.

Apple did not respond to TechCrunch's inquiry about the feature change, so it remains to be seen how the new controls will be enforced and when they will reach users. For developers of desktop AI apps, the test is whether requiring explicit user action will change how their apps function or how users perceive them. For Mac users, the stakes hinge on whether the new controls make the permission harder to grant by accident.

FAQ
What is Full Disk Access on macOS?
Apple explains it gives an app permission to access files, mail, messages, and even browsing history. It was designed to allow backups to function properly.
Why is Apple changing Full Disk Access now?
Apple said some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems without users' full knowledge and understanding. It also said AI agents have increased the risks associated with this level of access.
What did the journalist claim about Meta's Muse app?
Inc. columnist Jason Aten reported that Muse knew the content of his private messages, even though he claimed to have not given the AI agent permission. Meta disputed the claim.

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.

Questions and answers are published on this page.

Related Articles

Next articleOpenAI maps GPT‑6 family for startups