Skip to content

Full Disk Access

A macOS privacy permission that grants an app unrestricted read access to protected files and folders on the system, managed via Security & Privacy settings.

Known aliases

  • full-disk access
  • macOS Full Disk Access

Current stories

buildOne report1 publisher

Apple tightens macOS Full Disk Access over the risk AI agents bring to a backup-era permission

Apple announced on October 2 that macOS Full Disk Access can be granted only through very explicit user action, citing the added risk from AI agents. Agent builders can scope to user-selected folders now.

Publishers:dev.to

Reality

Evidence55
Adoption
Not scored
Hype gap+30
Incentives40
Confidence50
productConfirmed22 publishers

Apple will make Mac users take 'very explicit' action before AI agents get Full Disk Access

Apple said on Oct 2 it will add macOS controls for Full Disk Access after an Inc columnist said Meta's Muse agent read his private messages. The new step governs how users consent, and a user who completes it still gives an agent the whole disk.

Perspective Coverage

25 publishers
Builder
Builder 33%
Operator
Operator 55%
Investor
Investor 12%

Reality

Evidence68
Adoption8
Hype gap+30
Incentives55
Confidence62
productOne report1 publisher

Apple to Tighten Full Disk Access Permissions as Muse AI App Raises Privacy Concerns

Apple says it will require 'very explicit user action' before a Mac app gets Full Disk Access, after Meta's Muse was told to map relationships hourly. The new control comes at the moment a user grants access, so backup tools and AI agents that rely on the permission should plan for a harder setup step.

Publishers:9to5mac.com

Reality

Evidence40
Adoption
Not scored
Hype gap+15
Incentives
Not scored
Confidence35
investConfirmed4 publishers

Inc. columnist says Meta's Muse synced his texts to row 187,462 with Full Disk Access off

Inc. columnist Jason Aten says Meta's Muse agent synced his Mac texts up to row 187,462 while Full Disk Access showed as off. Meta says that cannot happen, so the dispute is over whether a settings screen shows users what an agent can actually read.

Perspective Coverage

5 publishers
Builder
Builder 34%
Operator
Operator 42%
Investor
Investor 24%

Reality

Evidence40
Adoption65
Hype gap+30
Incentives60
Confidence55
buildOne report1 publisher

Jason Aten says Muse used his Mac notifications and named them as its source

Meta gives Muse read access to Messages, Mail and local files on a Mac, and its approval prompts fire only before actions such as sending a message. A columnist says the agent used notification text he never offered.

Publishers:runtimewire.com

Reality

Evidence45
Adoption15
Hype gap+10
Incentives55
Confidence50
investOne report1 publisher

One dialog, everyone's archive: the Messages plugin breaks consent at the boundary

OpenAI's assurances about local processing describe what the vendor does with your texts. They say nothing about who agreed to supply them.

Publishers:fortune.com

Reality

Evidence58
Adoption
Not scored
Hype gap+22
Incentives68
Confidence55