Apple to Require 'Very Explicit User Action' Before Apps Get Full Disk Access on Mac, Citing AI Agent Risks

Apple published a developer blog post Friday, October 2, 2026, announcing it will add new restrictions to Full Disk Access, one of the most powerful permissions in macOS. The company's reasoning: AI agents now running on Macs are a bigger privacy threat than the backup software the permission was originally built for.

Full Disk Access lets an app see everything on a Mac. According to Apple's own Mac User Guide, that includes files, Mail, Messages, Safari data, Time Machine backups, and certain admin settings for every user on the machine. Getting it currently just requires a user to open System Settings, hit Privacy & Security, click Add, and select the app. One click, total access.

Apple didn't mince words about why that's a problem now. "We give developers powerful APIs to build incredible capabilities into their apps for Apple products, backed by a set of controls designed to protect users' private data," the company wrote. "Full Disk Access largely sidesteps these controls... Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems — including files, mail, messages, and even browsing history — without users' full knowledge and understanding."

That's a direct shot at an entire category of app, even though Apple named no one specifically.

The trigger

Inc. columnist Jason Aten reported that Meta's Muse app for Mac appeared to know the contents of his private messages even though he says he never gave it permission to see them. Meta disputed Aten's claim, according to TechCrunch. Separately, Wired reported a flaw in OpenAI's ChatGPT Mac app that could have let hackers reach sensitive data on affected machines.

Apple's post doesn't name Meta or OpenAI. The sequence is telling: Aten's report, Meta's denial, the Wired flaw, then Apple's announcement days later. TechCrunch reported that Apple did not respond to a request for comment on what specifically prompted the change.

What Apple actually promised

Not much in terms of detail. Apple said it will "introduce additional controls to ensure that users who genuinely wish to grant an app this extraordinary level of access can only do so with very explicit user action." It did not say what that action will be, whether it's a new prompt, a biometric check, a cooling-off period, or something else. It gave no date and no target macOS version. Unite.ai, which pulled directly from Apple's developer post, confirmed the company left those questions open.

Apple framed the stakes in blunt terms: "As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially. We are committed to ensuring users clearly understand these risks before granting such access, so they can make informed decisions about their own data and privacy."

The fair pushback

There's a legitimate concern on the other side of this. Apple itself admits Full Disk Access exists because backup apps genuinely need that level of system reach to function. Developers building AI tools that summarize your inbox, search your files, or act as a real assistant also need broad access to do the job users are asking for. If Apple's new friction is heavy-handed, it could cripple legitimate AI products just as easily as it blocks sketchy ones. That's a reasonable worry for any developer who isn't doing anything wrong and now has to clear a higher bar anyway.

Apple's answer, at least in this post, is that informed consent and legitimate functionality aren't in conflict. A user who wants an AI agent to read their email should still be able to grant that. The company just wants the click to mean something, instead of being buried in a settings menu most users never look at twice.

What's unresolved

Apple controls the App Store, the operating system, and the rules third-party developers live under. When it says it's tightening a permission, that's not a suggestion, it's a mandate every Mac developer will eventually have to comply with. But as of today, nobody outside Apple knows what the new consent flow looks like, which macOS release will carry it, or whether Meta's Muse and OpenAI's ChatGPT app will need to change anything at all to keep working the way they do now. Apple hasn't said, and it isn't taking questions.