Apple plans to add more explicit controls before Mac users grant an app Full Disk Access, a permission that can expose files, email, messages, and browsing history. The company says the change is needed as AI agents become more capable and autonomous, but it has not said when the controls will arrive or what they will look like.
In an Apple Developer News post published October 2, Apple said Full Disk Access largely bypasses other privacy protections so backup apps can work. The company warned that some developers use the permission in ways that could expose data without users fully understanding the access they are granting.
Why Full Disk Access is different
Most macOS privacy prompts ask for access to a particular category of data or action. Full Disk Access is broader: Apple says it can expose files, Mail, Messages, and even browsing history. The permission can also affect people beyond the Mac owner. Apple warned that access granted to a communication app may put the privacy of the people a user messages at risk too.
That breadth is why Apple calls it an “extraordinary” level of access. Some backup apps need it to do their job, but a user may not expect a utility or an AI assistant to have a view across personal files and communications. Our guide to moving iPhone backups off a Mac shows one existing use: giving Terminal Full Disk Access to redirect the backup folder.
Apple has not detailed the new controls
Apple says it will make users take a “very explicit” action before granting this level of access and wants people to understand the risks first. The company has not shared a new prompt design, named a macOS release, or given a rollout date. It also has not said whether apps with existing permission will need to ask again.
The announcement is about user consent around a powerful macOS permission, not a ban on AI apps or a statement that every app will lose access. It also is not limited to AI agents: Apple’s warning covers developers that use Full Disk Access broadly, with AI agents as the reason the risks are likely to increase.
That concern is becoming more visible as desktop agents move beyond chat and begin handling local files. For example, Gemini Spark is adding local-file and desktop automation features on Mac. Apple did not name Gemini Spark or any other specific app in its announcement, and the added controls may apply more broadly than agent software.
For Mac users, nothing changes today. Apple has not announced a setting to update or a permission that needs to be reset. Until it says more, users should treat Full Disk Access like a powerful key: grant it only when the app and task call for it, and remove access when it is no longer needed. The main unanswered question is how Apple will make that decision clearer when its new controls arrive.
