Apple tightens macOS Full Disk Access controls because of AI agents

Apple plans more explicit consent for macOS Full Disk Access. Local agent users and developers need to distinguish a task's needs from broad access to private data.

Oct 5, 2026

Apple plans additional controls for macOS Full Disk Access because it says more capable, autonomous AI agents increase the risks of broad access to private data. Its October 2 developer notice says granting that permission will require more explicit action by the user.

What Apple plans to change

Apple says Full Disk Access largely bypasses privacy controls so backup apps can work. The permission can expose files, mail, messages and browsing history. The company warns that some developers use it without users fully understanding the consequences. Access to communication apps can also affect the privacy of people those users talk to.

The announced change concerns how users consent. TechCrunch’s corrected report says Apple is strengthening informed consent, rather than imposing a new permission limit.

Apple’s notice leaves the rollout date and the design of those controls unspecified. Developers have a stated direction for permission requests, but the notice supplies no implementation instructions.

Practical context

Judge the permission against the task you want the agent to do

For a user running a desktop agent, the useful question is whether the requested task needs access to mail, messages and browsing history. Before granting Full Disk Access, ask the developer which of those data types the app reads and why. A request to work on particular files deserves an explanation if it also requires access to private conversations.

For developers, Apple’s warning is a reason to review the explanation beside the permission request. Name the data the app can access, explain which functions need it and tell users what they can still do if they decline. That gives a user a concrete choice instead of a setup step whose consequences become clear later.

Clearer consent helps users decide whether to grant broad access. Once they grant it, they still need to assess whether they trust the agent with that data. Apple’s warning about correspondents adds another consideration, because a user’s messages contain other people’s information too.

Sources

Apple: Updates to Full Disk Access in macOS, announcement and lead image credit.
TechCrunch: Apple says it’s tightening macOS ‘Full Disk Access’ controls due to new risks from AI agents