Apple Adds Full Disk Access Controls on macOS Over AI Agent Risks

Apple Introduces New Full Disk Access Controls on macOS

Apple announced that it will be introducing "additional controls" for the Full Disk Access setting on macOS, citing new risks posed by AI agents. The news came in a post on the company's developer news website, amid the rise of always-on AI agents like Meta's Muse and OpenAI's Dots, which have prompted privacy concerns.

According to Apple, "Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems—including files, mail, messages, and even browsing history—without users' full knowledge and understanding." The company added that "As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially."

Going forward, Apple said it will introduce additional controls to ensure that users who genuinely wish to grant an app this extraordinary level of access can only do so with very explicit user action. Apple did not say when the new Full Disk Access controls will be implemented.

Why Full Disk Access Poses Risks for Users

Apple is candid about the dangers of Full Disk Access. According to the company, "Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems—including files, mail, messages, and even browsing history—without users' full knowledge and understanding."

The exposure does not stop at the person using the Mac. Apple notes that for communication apps, this level of access "can also compromise the privacy of the people users are communicating with." In other words, messages and conversations belonging to friends, family, and colleagues could be caught up in data an app can reach.

Full Disk Access was originally intended to let backup apps function properly on the Mac, but it largely sidesteps the controls Apple designed to protect private data. Apple warns that "As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially," which is why the company says addressing the problem is critical.

AI Agents Increase the Stakes for Full Disk Access

Apple's announcement makes clear that the dangers of Full Disk Access are not static. "As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially," the company warned. That concern is tied directly to the rise of always-on AI agents such as Meta's Muse and OpenAI's Dots, which have prompted privacy concerns.

The reason is the sheer breadth of what Full Disk Access exposes. Apple notes that this level of access can reveal everything on a user's system—including files, mail, messages, and even browsing history—without users' full knowledge and understanding. For communication apps, it can also compromise the privacy of the people users are communicating with.

An agent that runs continuously and acts with greater autonomy could therefore reach far more sensitive data than a traditional app ever would. Apple says addressing this is critical, and that it is committed to ensuring users clearly understand these risks before granting such access, so they can make informed decisions about their own data and privacy.

What Apple's New Controls Will Require

Apple's announcement makes clear that simply offering Full Disk Access as a toggle is no longer sufficient. Going forward, the company says it will introduce additional controls to ensure that users who genuinely wish to grant an app this extraordinary level of access "can only do so with very explicit user action."

That phrasing matters. Apple isn't proposing to remove Full Disk Access entirely, nor is it blocking the legitimate apps that rely on it, such as backup utilities. Instead, the new controls are aimed at the moment of consent itself, requiring deliberate, unmistakable user intent rather than a routine click through a settings pane.

Apple also frames this as a question of comprehension, not just permission. The company states it is "committed to ensuring users clearly understand these risks before granting such access, so they can make informed decisions about their own data and privacy."

What remains unclear is timing. Apple did not say when the new Full Disk Access controls will be implemented, leaving developers and users to wait for further detail on how the revised flow will actually work in practice.