Apple will make Macs ask harder before an AI app gets the run of the whole house
By Brett Gavaghan, Founder of Adaptd ·
On 2 October Apple said it will tighten Full Disk Access on the Mac, the setting that lets an app read your files, mail, messages and browsing history. It named AI agents as the reason.
The short version
- Apple will add new controls so apps can only get Full Disk Access on a Mac after very explicit user action.
- Apple announced the change on 2 October 2026 and hasn't said which macOS version or date it arrives in.
- Check which apps on your team's Macs already have Full Disk Access and remove any that don't need it.
Full Disk Access is the Mac setting that says yes to everything in one click. Apple has decided that's a bit generous now AI agents are the ones asking.
What is Apple changing?
Apple is adding controls to macOS so an app can only get Full Disk Access after very explicit action from the user. In a developer news post on 2 October, Apple said some developers use the permission in ways that expose files, mail, messages and browsing history without users fully understanding it.
Apple said the setting exists mainly so backup apps can work, and that the risk grows as AI agents become more capable and autonomous. The announcement followed reports that Meta's Muse agent read a journalist's messages on a Mac. Meta said that only happens if a user grants Full Disk Access and turns on its message connector.
When does it arrive, and who does it affect?
Apple hasn't given a date or a macOS version yet, so nothing changes on your Macs today. When it lands, it affects any Mac user who runs apps that ask for Full Disk Access, which now includes several AI assistants and agents that want to read local files and messages.
For communication apps, Apple pointed out that the risk isn't only yours. Your clients' and colleagues' messages sit on your Mac too, and they never clicked Allow.
What should your business do about it?
Your business should check which apps already have Full Disk Access on each work Mac, under System Settings, Privacy & Security, Full Disk Access. Switch off anything that isn't a backup or security tool you know and trust.
My take: give an AI agent access to the folders it needs for the job, not the master key. It's the same rule you'd use for a new contractor. They get a key to the shed, not the house, the car and the diary.
Sources
Wondering what this means for your business?
That's exactly what the discovery call is for.