Apple is introducing additional controls around Full Disk Access on macOS, a setting originally designed to let backup software work properly. The company said AI agents have grown "the risks associated with this level of access."
Full Disk Access gives an app permission to read files, mail, messages and even browsing history. In the case of Meta's Muse, users can optionally enable the setting for the AI agent.
"Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems...without users' full knowledge and understanding," Apple said in a blog post aimed at developers.
Going forward, Apple said it will introduce controls ensuring that users who "genuinely wish to grant an app this extraordinary level of access" can do so only with "very explicit user action."
"Addressing this is critical. As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially," Apple wrote. "We are committed to ensuring users clearly understand these risks before granting such access, so they can make informed decisions about their own data and privacy."
The decision follows reporting by Inc. columnist Jason Aten that Muse knew the content of his private messages even though he said he had not given the AI agent permission. Meta disputed the claim. It also follows a Wired report that a flaw in ChatGPT's Mac app could have allowed hackers to grab sensitive data.
Apple did not respond to TechCrunch's inquiry about the feature change.