Apple has announced that it will soon be introducing additional control mechanisms that require "very explicit user action" to allow apps to Full Disk Access (full disk access) in the macOS operating system. This information was revealed in a post on Apple's developer website on October 2, 2026, titled "Updates to Full Disk Access in macOS." The main driver of this initiative is the rapidly growing capabilities of artificial intelligence (AI) agents, which Apple says could pose greater risks if they gain broad access to user data.
Why is Apple changing its Full Disk Access policy?
The Full Disk Access permission is traditionally used by backup applications that need to read all files in order to create a complete system backup. However, Apple has noticed that some developers are using this permission not only for backup purposes, but also in other ways that can pose privacy threats. The permission gives access to all user data - files, email, messages, browsing history - often without the user fully understanding what it means.
Apple also warned that when communication apps have Full Disk Access, it can affect the privacy of not only the user themselves, but also their communication partners. This risk is even more pronounced in the context of artificial intelligence agents: AI agents, in order to act on behalf of the user, often request almost full system access, including passwords, accounts and other sensitive information. If such an agent were manipulated with a „poisoned“ prompt, abusers could gain access to the data under their control.
Impact and examples of AI agents
Apple emphasizes that the autonomy of AI agents and their ability to perform actions without direct user intervention is a major concern. Source 1 in the thumbnail notes that OpenAI introduced a persistent Dots agent in late September 2026, and the previous wave of the Moltbot project prompted some buyers to purchase Mac minis specifically for these agents. In addition, OpenAI plans a persistent ChatGPT assistant for Pro subscribers. Such examples show that AI agent tools are becoming more widely available and easier to implement, so Apple wants users to clearly understand what they are enabling.
New control requirements
While Apple hasn’t yet provided specific technical details on what the new approval process will look like, sources 1 and 2 agree that the upcoming control mechanisms will require „very explicit user action.“ This means that a simple toggle or automatic permission won’t be enough — the user will have to actively confirm that the app can get full disk access, perhaps through an additional dialog box or verification step.
Apple also reminds users that they can now view which apps have Full Disk Access and remove this permission from apps that aren't backup tools or don't explicitly request such access. This is especially important in the case of AI agents, where some apps, like Meta's Muse for Mac, offer an additional Full Disk Access toggle to work with files, calendars, and email.
When to expect changes?
Apple didn't give a specific date for when these new controls will be implemented, nor did it say whether existing Full Disk Access permissions will be restored. There's also no word on how these changes will affect backup app developers. For now, users can only check and, if necessary, revoke permissions via System Settings → Privacy & Security section.
Conclusions
Apple’s move to strengthen privacy protections in macOS reflects growing concerns about the power of AI agents and the potential risks of data access. While details are still lacking, the clear user action required by the new policy should help users better understand what data they are sharing with apps. Until Apple reveals specific technical solutions, it is recommended to regularly review permissions and revoke those that are not necessary, especially when it comes to AI tools.
—
Apple Full Disk Access Control macOS This is an important step that could impact both ordinary users and businesses implementing AI solutions. Stay tuned to find out when these changes will appear in the official version of macOS.
Sources
- Ghacks Technology News - Apple Will Require Explicit User Action to Grant Full Disk Access in macOS, Citing AI Agents
- iPhone in Canada - Apple Tightens Full Disk Access on Mac Over Privacy Risks
- Biztoc.com - Apple Makes It Tougher for AI Agents to Access Macs
