AI apps can go far beyond the data Mac users intend to share, which has prompted Apple to take action and require clearer consent before granting access.
On Friday, Apple announced plans to tighten full disk access controls on the Mac as AI agents gain access to sensitive personal information. Permission allows apps to bypass privacy protections and could expose messages, emails, files, and browsing history.
Recent incidents involving Meta’s Muse and other agents illustrate the risks. Not only can they access sensitive information, OpenAI recently fixed a bug in its Mac app that could have allowed its agent to become corrupted and execute malicious commands on behalf of an attacker.
For Mac users, granting full disk access can also expose private information belonging to anyone they communicate with. Apple says its next checks will require explicit action from the user, making the risks clearer before access is granted.
The full text, posted as an update on the developers’ website, is as follows:
We provide developers with powerful APIs to integrate incredible functionality into their apps for Apple products, supported by a set of controls designed to protect users’ private data. Full disk access largely bypasses these controls to allow backup apps to work properly on the Mac. Some developers use full disk access in ways that could put users at risk, exposing everything on their systems—including files, mail, messages, and even browsing history—without users’ full knowledge and understanding. For communication apps, this can also compromise the privacy of the people users communicate with.
Going forward, we’ll introduce additional controls to ensure that users who truly want to grant an app this extraordinary level of access can only do so with a very explicit user action. Addressing this issue is critical. As AI agents become increasingly capable and autonomous, the risks associated with this level of access will increase dramatically. We are committed to ensuring that users clearly understand these risks before granting such access, so that they can make informed decisions about their data and privacy.
There’s no word on when Apple will implement the new “Full Disk Access” controls.
