Apple Says AI Apps Have Too Much Access to Your Mac — and It's About to Make That Permission Much Harder to Grant
In 60 seconds: Apple says it will soon require "very explicit user action" before any Mac app can get Full Disk Access — the permission that opens up your system files, mail, messages, and browsing history — warning that the privacy risks from AI agents "will grow substantially" as they get more capable and autonomous.
- Apple announced Friday it will add new privacy controls for Mac: granting an app Full Disk Access — your system files, mail, messages, and browsing history — will soon require "very explicit user action."
- Apple explicitly named AI agents as the reason, warning the risks of broad data access "will grow substantially" as agents become "increasingly capable and autonomous."
- The company said some developers have used Full Disk Access in ways that could put users at risk without their "full knowledge and understanding" — and noted message access can compromise the privacy of people you talk to, not just you.
- Context: OpenAI says 35M+ people now use its agent tools (up from 10M in July); Meta's Muse topped app-store charts last month; both need deep system access to work.
- Apple didn't name any specific app or say when the new controls ship — but the message to AI developers was unmistakable.
Here's a question worth asking: how many apps on your Mac can read your text messages right now? If you use an AI agent, the answer might be "all of them." Apple just decided that's a problem — and it's about to make that kind of access much harder to give away.
What happened
In a statement Friday reported by Bloomberg, Apple said it plans new privacy controls for Mac users, aimed at how third-party software — especially AI agents — asks for broad access to personal data. The target is "Full Disk Access," the macOS permission that hands an app the keys to nearly everything: system files, mail, messages, browsing history. Going forward, Apple said, granting that level of access will require "very explicit user action." Its framing was blunt: "We are committed to ensuring users clearly understand these risks before granting such access, so they can make informed decisions about their own data and privacy."
Latest verified facts
Apple named no programs or developers. It didn't need to — the timing tells the story. AI agents that act on your behalf with little supervision have exploded: OpenAI said earlier this week that 35 million-plus people now use its agent products, ChatGPT Work and Codex, up from 10 million in July. Meta's Muse topped app-store download charts last month. These tools only work if you hand them broad access to your files and apps.
Apple's warning had two sharp edges. First, some developers have used Full Disk Access "in ways that could put users at risk" without their "full knowledge and understanding" — corporate language for: apps are taking more than you realize. Second, Apple flagged a privacy problem most people never consider: giving an app your messages exposes everyone you've talked to, not just you. One live example: in August, OpenAI added an opt-in ChatGPT Mac feature that can read, summarize, write, and send text messages for you — it needs Full Disk Access to reach Apple's Messages app. That's exactly the deep integration Apple's new rules target.
Why it matters
This is Apple doing what Apple does: turning privacy into a product feature and a cudgel at once. An AI that can't read your email can't summarize it; one that can't see your calendar can't schedule for you. Usefulness and privacy are in direct tension, and Apple just planted its flag on the privacy side. There's a competitive undertow too — every friction Apple adds to third-party agents is friction rivals must design around. The statement reads as consumer protection, and it is. It's also a warning shot: the free-for-all permission era on the Mac is ending.
Related coverage: 'One-Fifth the Price': OpenAI's Cheapest Powerhouse Just Launched — Days After It Killed Its Scariest Model · 'We Did Not Authorize This': OpenAI Apologizes After Its Own AI Hacked Australia's Medicare Portal
Impact on the USA and the world
For America's tens of millions of Mac users, this will eventually mean an extra, harder-to-miss consent step before an app can vacuum up their digital life. For AI startups, it's a design constraint with teeth: agents that quietly request Full Disk Access on install will soon have to convince users, explicitly, that the trade is worth it. Globally, Apple's move sets a template — when Apple tightens a privacy screw, EU regulators cite it and rivals face pressure to match. The agent era will be negotiated permission by permission. This is the first big one.
What happens next
Apple gave no ship date, which likely means the controls are tied to an upcoming macOS update. Expect developer pushback — AI companies whose products depend on deep access won't love an extra consent wall. The practical move for Mac owners doesn't require waiting: open System Settings, see which apps hold Full Disk Access, and ask whether each still deserves it. Apple's about to make that question harder to ignore. That's the point.