Apple to Tighten Mac Full Disk Access Over AI Agent Risks

On October 2, 2026 Apple said it will add controls to Full Disk Access in macOS, the permission that lets an app read everything on a Mac. The reason it gives is AI agents. There is no date and no macOS version yet. It matters to anyone who runs AI apps on a work Mac.

What we know

  • What it is: a two-paragraph post, "Updates to Full Disk Access in macOS", on Apple's developer news page, dated October 2, 2026.
  • What Apple will do: introduce additional controls so that only users who really want to give an app this level of access can do so, and only through what Apple calls "very explicit user action."
  • The problem it describes: some developers use the permission in ways that put users at risk. It exposes the whole system, and Apple lists files, mail, messages and browsing history, without users fully knowing or understanding it.
  • Who else is exposed: for communication apps, Apple says, the privacy of the people you talk to is compromised as well.
  • Why the permission exists: so that backup apps can work properly on the Mac. That is why it largely sidesteps the controls that protect private data.
  • AI: Apple writes that as AI agents become more capable and autonomous, the risks of this level of access will grow substantially.
  • What it does not say: no date, no macOS version, no description of the controls. It names no app and no company.
  • The context, according to TechCrunch: the post came days after a journalist claimed that Meta's Muse app for Mac had read his private messages. Meta disputed the claim. TechCrunch adds that Apple did not respond to its questions about the change.

What changes and what doesn't

Nothing changes on your Mac today. The permission works as it did yesterday, and Apple has not said what happens to access that has already been granted.

The warning changes. Apple now says in writing that this permission is extraordinary and that the risk grows with AI agents. An agent does not only read. It also acts.

It is not a ban. The post talks about users who really wish to grant the access. Granting it will still be possible, through a more explicit action.

And it is macOS only. The post does not mention iPhone, iPad or Windows.

How to tell if it affects you

It affects you if any app on a work Mac holds this permission, AI or not. Checking takes a few minutes:

  1. Open the list. Apple menu > System Settings > Privacy & Security > Full Disk Access.
  2. Read which apps are there. According to Apple's Mac guide, apps with this permission can access all files on the computer, including data from other apps such as Mail, Messages and Safari, and Time Machine backups.
  3. Ask what each one needs it for. A backup app needs it. For the rest, if you cannot answer, remove the permission and see whether the app still does what you ask of it.
  4. Slow down at install time. If an AI app asks for this permission during setup, stop. Check first whether it can work with only the folder it needs.
  5. Think about what lives on that computer. Contracts, invoices, email, your customers' data and your conversations with them. The permission reaches all of it.
  6. Write it down. If your business has several Macs, decide who may grant this permission and to which apps.

How we apply it at DomHostSeo

We use AI to write and illustrate, within rules we wrote ourselves. The same idea holds for an app's permissions: set the limits before the tool starts working, not after.

For this story we opened Apple's post and its privacy settings guide. The link to Meta's app is not in Apple's post. It comes from TechCrunch, so we attribute it. We have not tested the new controls: they do not exist yet. It is the rule we described in Google: Fact-Check AI Content by Hand Before Publishing: the source first, then the story.

Sources

Updates: we will add the date and the macOS version here once Apple publishes them, along with what the controls look like.