Apple is planning to change the process for granting Full Disk Access in macOS to enhance user security. This permission allows apps and AI agents, such as Meta’s Muse, to access files, emails, messages, and Safari browser history. Currently, Apple has not announced when these new measures will take effect. Users can already check which applications have this access in the system settings.

Reasons for the Changes

Some developers use Full Disk Access in ways that may pose risks to users. Data such as files, emails, messages, and browser history can be accessed by applications without the user’s full awareness. In the future, granting such access will require explicit user confirmation. As AI agents become more capable and autonomous, the associated risks increase.

The Purpose of Full Disk Access

Full Disk Access is necessary, for example, for backup applications to work with any files on the device. This permission bypasses standard macOS protections for certain folders and data from other apps. Applications with this access can open all files on the computer and retrieve data from Mail, Messages, Safari, Home, Time Machine backups, and some administrative settings for all Mac users. For communication apps, this access may affect the privacy of people the user interacts with.

Concerns Around Meta’s Muse

The discussion about these changes followed reports regarding Muse, Meta’s AI agent. In one case, Muse synchronized a significant amount of message history on a Mac, even though the user had denied access to Messages during setup. Meta claims that accessing messages requires both Full Disk Access and a special Messages connector. It remains unclear what exactly happened in this specific case. It’s also noted that other AI agents, such as OpenAI Dots, request broad access to the computer, and the ChatGPT app for Mac can record user actions on the device.

Implementation Timeline

Apple has not yet announced which macOS version or when the new measures will be implemented. In the latest macOS 27, released on September 14, no changes to these settings have appeared. Until the new rules are introduced, the permission is managed with a single toggle.

How to Check Apps with Full Disk Access

Users can view the list of applications with Full Disk Access by opening the Apple menu and selecting “System Settings” — “Privacy & Security” — “Full Disk Access.” All apps with this permission are shown with a corresponding switch. For backup software and some security tools, this access is genuinely necessary. For AI assistants, it’s recommended to consider whether they really need access to your mail and messages, or if permission to specific folders via “Files and Folders” is sufficient. Disabling access may affect some app features, but the app itself will remain installed.

It’s also important to pay attention to other permissions, such as “Universal Access” (which allows apps to control your Mac) and “Screen and System Audio Recording” (which lets apps record what’s happening on your screen). Meta’s AI features have already raised privacy concerns, for example with Muse Image and Instagram photos, so it’s advisable to regularly review the list of apps with extended permissions.