Apple has decided to take action regarding one of macOS's most sensitive permissions. The company has announced that it will add additional controls to Full Disk AccessThis authorization allows an application to read files, emails, messages, and even the computer's browsing history. The main reason for this is the rise of artificial intelligence agents, which are increasingly capable of acting autonomously on local content.
The announcement comes after several incidents that have brought privacy issues into focus. The most high-profile of these involves... Muse, Meta's assistant for MacA journalist had already reported that the tool had accessed private conversations without permission. This comes in addition to a Wired report on a potential vulnerability in the ChatGPT app for Mac. Apple has not yet specified when or how it will implement the changes.
What is Full Disk Access and why is it a concern?
This permission has existed for some time and was created to allow utilities like backups to function without hindrance. However, its scope is very broad: An authorized app can bypass a large part of the protections macOS applies this to other logins. Apple itself has acknowledged that some developers use it in ways that could expose sensitive information without the user being fully aware.
The problem has worsened with the arrival of AI agents that need to read and write personal data to complete tasks. These are no longer just backup programs, but assistants that can review documents, emails, or messages. According to the company, The more capable and autonomous these agents areThe greater the risk associated with such a broad permit.
Apple has explained that those who wish to grant this level of access must complete a very explicit actionThe idea is for the user to understand what they are authorizing before granting permission. However, the company has not yet specified what this confirmation will look like or whether it will apply equally to all applications.
The Muse case and the shadow of ChatGPT
The most talked-about trigger has been the account of Jason Aten, a columnist for Inc. According to his experience, Muse suggested an idea for an article to him based on a private iMessage conversation. Aten maintained that he had disabled access to Messages and that the Full Disk Access was disabled on his Mac mini. Meta responded that the integration is optional and requires enabling both system permission and a specific Messages connector.
Mark Zuckerberg's company denied that its assistant accessed messages without consent. Spokesperson Andy Stone insisted that it was a feature. fully opt-inLater, David Singleton of Meta Superintelligence Labs admitted that Muse's initial explanation to Aten was inaccurate, though he maintained that the mechanisms are not designed to circumvent permissions.
The debate isn't limited to Meta. A Wired report indicated that a vulnerability in the ChatGPT application for Mac This could have allowed attackers to access sensitive data. The available information does not confirm a data breach, but it does reinforce concerns about how desktop AI tools manage permissions. Apple did not mention Meta or OpenAI by name in its advisory.
What changes for users and businesses
For now, Apple hasn't set a date for when these controls will arrive. Nor has it clarified whether there will be additional screens, administrator password authentication, or repeated notifications. What it has made clear is that does not plan to remove the permissionbut rather to establish clearer conditions for those who actually want to grant it. The company also did not respond to TechCrunch's questions about how the change works.
For users, the recommendation is to check which applications have this access in System Settings > Privacy and Security > Full Disk AccessIn Spain and the rest of Europe, where many companies handle personal data daily, it's advisable to audit these permissions regularly and revoke any that aren't recognized. This isn't a setting you can configure once and forget about.
Developers building AI agents or assistants should invest in granular permissionsIf a task only needs to read a specific folder, there's no point in requesting full disk access. It's also advisable to provide a visible log of what data is being read or modified, so the user can understand the tool's true scope. Apple has laid the groundwork, but the trend suggests other platforms will follow suit.
Apple's move leaves several questions unanswered, but it marks a turning point in how operating systems treat AI agents. Permission will still exist for backup tasks, although granting it will be more deliberate and, predictably, more inconvenient. For the user, the key lies in... not to give full access to the lightlyFor the developer, it means asking only for what's necessary and explaining it clearly. Privacy ceases to be a secondary detail and becomes a product requirement.