Apple announced it is tightening macOS Full Disk Access controls following reports that Meta’s Muse app read private messages without explicit user permission. The company states that AI agents have increased the risks associated with this permission level, which was originally designed to allow backups to function properly. This decision follows separate findings that a flaw in the ChatGPT Mac app could have allowed hackers to access sensitive data.
The update requires very explicit user action before granting an app this extraordinary level of access to files, mail, messages, and browsing history. Apple notes that some developers are using Full Disk Access in ways that put users at risk without their full knowledge. As AI agents become increasingly capable and autonomous, the company argues that users must clearly understand these risks before granting such access to make informed decisions about their own data and privacy.
- Meta disputes the claim that Muse read private messages
- ChatGPT’s Mac app had a separate security flaw
- New controls require explicit confirmation for Full Disk Access
