Apple moves to curb AI agents’ reach into private Mac data

Apple plans to add stricter controls to Full Disk Access on macOS, a permission that can give apps access to files, messages, email, and browsing history. Sarah Perez reports for TechCrunch that Apple sees growing risks as AI agents become more capable and autonomous.

Full Disk Access was originally intended to help backup software work properly. It also gives desktop applications unusually broad access to a user’s personal data. AI agents can use that access to search files, read communications, and perform actions across a Mac.

Apple says some developers use the permission in ways that may expose data without users fully understanding the consequences. The company will introduce new safeguards so people can grant this level of access only through what it calls very explicit user action.

Concerns around desktop AI

The change follows a report by Inc. columnist Jason Aten, who said Meta’s Muse app appeared to know the contents of his private messages despite his claim that he had not permitted it to access them. Meta disputed the allegation.

Muse lets users optionally enable Full Disk Access. Apple says the setting can allow an app to reach files, mail, messages, and browsing history. The case has drawn attention to how much system access users may grant desktop AI tools in exchange for automation.

Apple’s move also follows a Wired report about a security flaw in ChatGPT’s Mac app that could have exposed sensitive information to attackers. Apple has not detailed the exact design or release schedule for its new Full Disk Access controls, and it did not respond to TechCrunch’s request for further comment.