{"slug": "apple-s-macos-27-3-may-tighten-ai-access-but-private-folders-could-be-the-bigger", "title": "Apple's MacOS 27.3 May Tighten AI Access but 'Private Folders' Could Be the Bigger Privacy Fix", "summary": "Apple is testing a macOS 27.3 feature flag named TCC/FDA_WARNING that would stop apps automatically appearing on the Full Disk Access permissions list after a denied read, requiring users to add applications manually, according to code researcher pdfu's analysis reported by 9to5Mac on 8 November. The flag is disabled in the first macOS 27.3 beta, released 3 November, and carries no additional warning dialogue, and Apple has not confirmed either change will ship. Pdfu also found an unfinished \"Private Folders\" mechanism in the same beta that could let users grant access to a specific location instead of broad protected-data access, though 9to5Mac noted it is unclear whether it could reach the folder holding the iMessage database.", "body_md": "# Apple's MacOS 27.3 May Tighten AI Access but 'Private Folders' Could Be the Bigger Privacy Fix\n\n## A leaked macOS 27.3 change could make Full Disk Access harder for AI apps to obtain, while 'Private Folders' may offer a more precise privacy safeguard\n\nApple appears to be quietly testing two major changes to how Mac apps tap into users' most sensitive data, yet an unfinished 'Private Folders' feature buried in macOS 27.3 could ultimately reshape privacy on the platform more than the tighter [AI safeguards](https://www.ibtimes.co.uk/us-banks-restrict-third-party-ai-agents-1827385) now under trial.\n\nThe findings come from code researcher pdfu, whose analysis was reported by 9to5Mac on 8 November. Both developments remain uncertain: Apple has not confirmed that either will reach users in its current form.\n\n## How macOS 27.3 Could Change Full Disk Access\n\nFull Disk Access gives approved applications extensive reach into information on a Mac, including material normally protected by the operating system. It can be useful for backup software, but the breadth of that permission raises questions when an AI agent needs only a particular file or conversation.\n\nApple acknowledged that concern on 2 October, warning that some developers were using Full Disk Access in ways that could expose [files, emails, messages and browsing history](https://www.ibtimes.co.uk/apple-public-icloud-links-file-checks-account-disables-1830353) without users fully understanding the consequences. It promised additional safeguards requiring 'very explicit user action' before granting such access.\n\nPdfu's research suggests one possible first step. Currently, when an app tries to read a protected file without the necessary permission, macOS denies the request and records the attempt. The app can then appear under System Settings > Privacy & Security > Full Disk Access, with its switch turned off.\n\nDevelopers can direct users to that screen and ask them to enable the switch. Although approval still requires a user decision, the process makes a far-reaching permission relatively easy to grant. The proposed restriction would affect apps generally, not only AI tools, although autonomous agents are central to Apple's concerns.\n\nAccording to pdfu, a feature flag named TCC/FDA_WARNING would stop these automatic denials from placing apps on the permissions list. Users would instead have to add an application manually, using the plus button or dragging its icon into the panel.\n\nThere is a crucial qualification: the flag is disabled in the first macOS 27.3 beta, which Apple released on 3 November. The researcher also found no additional warning dialogue attached to it. Apple has not announced whether the change will be activated before the software's wider release.\n\n## Why 'Private Folders' Might Matter More\n\nThe larger privacy problem may remain even if granting Full Disk Access becomes less convenient. An [AI assistant](https://www.ibtimes.co.uk/claude-code-iphone-hidden-face-images-cache-1828389) seeking to work with iMessage conversations, for example, could still require a permission broad enough to expose [unrelated personal information](https://www.ibtimes.co.uk/meta-muse-ai-sharing-links-privacy-concerns-1827190).\n\nPdfu also identified 'Private Folders', an unfinished folder-by-folder permission mechanism in the same beta. In theory, it could allow users to authorise access to a specific location rather than give an application unrestricted access to protected data elsewhere on the Mac.\n\nThat could make a practical difference for someone who wants an AI tool to work with messages without opening up other files. However, 9to5Mac cautioned that it remains unclear whether the proposed system could actually grant access to the folder containing the iMessage database.\n\nNor has Apple explained how developers would request this narrower permission, what safeguards might apply or when, if ever, it could become available.\n\nFor now, the code findings point to two approaches: making broad access harder to approve and potentially reducing the amount of [data apps need to see](https://www.ibtimes.co.uk/libreoffice-26-8-no-built-ai-privacy-1824099). Only the second would directly address the underlying trade-off, provided Apple implements it as researchers hope.\n\n© Copyright IBTimes 2026. All rights reserved.", "url": "https://wpnews.pro/news/apple-s-macos-27-3-may-tighten-ai-access-but-private-folders-could-be-the-bigger", "canonical_source": "https://www.ibtimes.co.uk/apples-macos-273-may-tighten-ai-access-private-folders-could-bigger-privacy-fix-1831010", "published_at": "2026-11-09 08:49:46+00:00", "updated_at": "2026-11-09 08:52:00.178312+00:00", "lang": "en", "topics": ["artificial-intelligence", "ai-agents", "ai-policy"], "entities": ["Apple", "macOS 27.3", "pdfu", "9to5Mac", "Full Disk Access", "TCC/FDA_WARNING", "Private Folders", "iMessage"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/apple-s-macos-27-3-may-tighten-ai-access-but-private-folders-could-be-the-bigger", "markdown": "https://wpnews.pro/news/apple-s-macos-27-3-may-tighten-ai-access-but-private-folders-could-be-the-bigger.md", "text": "https://wpnews.pro/news/apple-s-macos-27-3-may-tighten-ai-access-but-private-folders-could-be-the-bigger.txt", "jsonld": "https://wpnews.pro/news/apple-s-macos-27-3-may-tighten-ai-access-but-private-folders-could-be-the-bigger.jsonld"}}