Technology

Apple wants explicit consent for Full Disk Access on Mac

Because of AI agents, Apple will look for very explicit user action before macOS apps get Full Disk Access. What should Mac-using teams do now?

Short answer

Apple has said it will introduce new controls around the Full Disk Access setting in macOS. AI agents asking for broad access to files, mail and messages are raising the risk. Apple wants apps that request this permission to obtain consent through a very explicit user action, though it has not said when the change will arrive.

Highlights

  • In a post for developers, Apple said some developers use Full Disk Access in ways that put users at risk.
  • The permission opens files, mail, messages and browsing history; it exists mainly so backup apps can work.
  • No rollout date has been given; TechCrunch described the change as informed consent rather than a new limit.
A hand holding a brass padlock, symbolising security and protection
Photo: Nathan Thomas / Pexels

3 min readEditor-in-chief: Uğur Deniz İlhan

Giving a Mac app Full Disk Access means opening up almost everything on the computer. According to TechCrunch and The Verge, Apple has announced new controls, citing the growing risk of this permission in the age of AI agents.

What is Full Disk Access, and why is it risky?

Full Disk Access is a macOS permission that lets an app reach a user's whole system. Apple says that access covers files, mail, messages and even browsing history. The feature was designed so backup apps could work properly, and in The Verge's account it largely sidesteps the privacy controls offered to users.

In its post for developers, Apple said some developers use the permission without users' full knowledge and understanding, in ways that expose everything on their systems. It added that as AI agents become more capable and autonomous, the risks of this level of access will grow substantially.

What will Apple change?

Apple said the new controls will ensure that users who genuinely want to grant this extraordinary level of access can only do so through "very explicit user action". The company did not say when the change will go live. TechCrunch wrote that it first described the change as a "limit" and later corrected the wording to say it is an informed-consent arrangement rather than a new limit, while The Verge uses the word "limit". The exact scope should become clear once Apple publishes details.

The announcement followed a claim by Inc. columnist Jason Aten that Meta's Muse app knew the contents of his private messages without his permission. Meta disputed this: its spokesperson Andy Stone said that for Muse to read messages, both Full Disk Access and the Messages connector must be enabled.

What should teams in Turkey do?

This is an Apple product decision and contains nothing specific to Turkey. It is still a practical reminder for agencies, software teams and managers who use Macs: desktop AI agents may ask for broad permissions during setup, and those can extend to client files, correspondence and browser history. For teams that process personal data, it is also a data-security matter.

  • Review which apps have Full Disk Access in System Settings on company Macs, and question any grant made for a reason other than backup.
  • Before trying a new AI agent, establish in writing which permissions it asks for and whether your work really needs them.
  • On devices holding customer data, test agent apps in a separate user account or on a test machine.

Frequently asked

What happens if I turn Full Disk Access off?
Apps that rely on the permission, such as backup tools, may be unable to reach protected folders. It makes sense to keep it on only for apps that genuinely need it.

Sources

  1. TechCrunch ·
  2. The Verge ·

Follow UNIT Journal

What's new in search, AI and technology, in your feed every day.

Related articles

← Back to UNIT Journal

Let us measure
your visibility today.

We map your current search visibility and your standing inside generative engines. Free, one page, real data.

Request an Analysis