★ Apple Is Going to Further Tighten the Screws on Full Disk Access on MacOS, in Response to Agentic AI Apps Running Amok

Apple Developer News, in a post titled “ Updates to Full Disk Access in macOS ”: We give developers powerful APIs to build incredible capabilities into their apps for Apple products, backed by a set of controls designed to protect users’ private data. Full Disk Access largely sidesteps these controls in order to allow backup apps to function properly on the Mac. Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems — including files, mail, messages, and even browsing history — without users’ full knowledge and understanding. For communication apps, this can also compromise the privacy of the people users are communicating with. Going forward, we will introduce additional controls to ensure that users who genuinely wish to grant an app this extraordinary level of access can only do so with very explicit user action. Addressing this is critical. As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially. We are committed to ensuring users clearly understand these risks before granting such access, so they can make informed decisions about their own data and privacy. They don’t name names or even mention “agentic AI”, but clearly this is in response to Meta Muse (cf. Jason Aten’s misadventure with Muse accessing Aten’s iMessages), Grok Bot , Claude, Dots, and the rest. This is why we can’t have nice things. I really worry about just how much Apple is going to lock Full Disk Access down.

Appears in