Apple Tightens macOS Full Disk Access Controls Amid AI Agent Privacy Risks

What happened

Apple announced that it will revise the macOS Full Disk Access setting to limit how applications can read and write system files. The move comes after reports that AI agents such as Meta’s Muse used FDA to access private iMessages, mail, messages, and browsing history without users’ full awareness.

Impact

Any macOS app that currently has FDA enabled may be able to bypass normal sandbox restrictions and read sensitive data. This includes security tools, backup utilities, and emerging AI assistants that rely on deep system access. Users who have granted FDA to unknown or untrusted applications are at risk of data exposure.

What to do

• Open System Settings → Privacy & Security → Full Disk Access and review the list of apps.
• Remove FDA from any application that does not explicitly require full system access.
• Verify that AI‑powered tools are from reputable vendors and understand the permissions they request.
• Keep macOS updated; Apple has not yet released the new FDA controls, but future updates will enforce explicit user action for granting access.

"As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially," Apple said.