{"slug": "apple-tightens-mac-full-disk-access-as-ai-agents-push-for-deeper-data-reach", "title": "Apple tightens Mac full disk access as AI agents push for deeper data reach", "summary": "Apple announced on Friday, October 2, 2026, that it will add new limits to macOS Full Disk Access, requiring \"very explicit user action\" before an app can read files, Mail, Messages and Safari history, citing risks from AI agents. The change follows a September report by Inc. columnist Jason Aten that Meta's Muse AI reached 187,000 rows of Messages data without his explicit permission, an account Meta spokesperson Andy Stone disputed, saying Messages access is \"entirely opt-in\" and requires both Full Disk Access and an app-level Messages connector. Apple did not detail how the new controls will work or when they will arrive.", "body_md": "Apple official logo (public domain, Wikimedia Commons) — CryptoBriefing brand treatment\n\n# Apple tightens Mac full disk access as AI agents push for deeper data reach\n\nThe company says granting apps sweeping macOS permissions will soon require very explicit user action, weeks after a dispute over Meta's Muse AI and private Messages.\n\n[Apple](https://cryptobriefing.com/markets/apple/) is putting a tighter lock on one of the most powerful permissions in macOS. The company says it will add new limits to “Full Disk Access” on the Mac, citing risks from AI agents.\n\n## What Apple is changing\n\nApple announced the change in an update on Friday, October 2, 2026, a story first reported by TechCrunch. The company says it is rolling out new controls for the permission.\n\nApple framed the goal this way:\n\n“Ensure that users who genuinely wish to grant an app this extraordinary level of access can only do so with very explicit user action.”\n\nFull Disk Access is roughly the master key to a Mac. Once granted, an app can read your files, your Mail, your Messages and your Safari browsing history.\n\nIn a post on its developer blog, Apple explained that the permission was originally meant for legitimate backup software. Backup tools need to see everything, because their entire job is copying everything.\n\nThe problem, according to Apple, is that some developers have used the permission for other purposes. AI agent builders were singled out as a particular concern. Apple says such apps have been able to reach sensitive data, including files, communications and browsing history, without users fully understanding what they had approved.\n\n### AI, tech, and the markets they move—in one daily briefing.\n\nDaily. Free. Join 34,000+ readers across crypto, finance, and policy.\n\nApple also flagged a wrinkle that is easy to overlook. When one user grants this access, the privacy of the people messaging that user can be compromised too.\n\nWhat Apple did not provide is a detailed breakdown of how the new controls will work or when they will arrive.\n\n## The Meta Muse dispute that set the stage\n\nThe announcement follows a September report from Inc. columnist Jason Aten about [Meta](https://cryptobriefing.com/markets/meta/)’s Muse AI. Aten reported that Muse appeared to know the contents of his messages, even though he said he had not explicitly given the chatbot permission to access them on his iPhone or Mac. His report described the AI reaching 187,000 rows of Messages data.\n\nMeta disputed that account. Spokesperson Andy Stone said access to Messages is “entirely opt-in.”\n\nAccording to Meta, reading Messages requires two separate steps. A user must grant Full Disk Access to the app and also enable a specific app-level connector for Messages.\n\n## Why AI agents changed the math\n\nDesktop AI agents such as Meta’s Muse and [OpenAI](https://cryptobriefing.com/markets/openai/)’s Dots are growing in popularity. These tools often request broad local access so they can deliver richer, more personalized help.\n\nApple’s own framing points to this tension. The company highlighted the growing risks tied to what autonomous AI agents are capable of doing, not just what they are designed to do.\n\n**Disclosure:** This article was edited by Diego Almada Lopez. For more information on how we create and review content, see our\n\n[Editorial Policy](https://cryptobriefing.com/editorial-policy/).", "url": "https://wpnews.pro/news/apple-tightens-mac-full-disk-access-as-ai-agents-push-for-deeper-data-reach", "canonical_source": "https://cryptobriefing.com/apple-limits-mac-full-disk-access-ai/", "published_at": "2026-10-02 20:13:32+00:00", "updated_at": "2026-10-02 20:37:08.027621+00:00", "lang": "en", "topics": ["ai-policy", "ai-agents", "artificial-intelligence"], "entities": ["Apple", "Meta", "Muse AI", "Jason Aten", "Andy Stone", "OpenAI", "Dots", "TechCrunch"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/apple-tightens-mac-full-disk-access-as-ai-agents-push-for-deeper-data-reach", "markdown": "https://wpnews.pro/news/apple-tightens-mac-full-disk-access-as-ai-agents-push-for-deeper-data-reach.md", "text": "https://wpnews.pro/news/apple-tightens-mac-full-disk-access-as-ai-agents-push-for-deeper-data-reach.txt", "jsonld": "https://wpnews.pro/news/apple-tightens-mac-full-disk-access-as-ai-agents-push-for-deeper-data-reach.jsonld"}}