> ## Content Index > Fetch the complete content index at: https://www.techbetweenthelines.com/llms.txt > Use this file to discover other available public pages before exploring further. # Apple Is Tightening Full Disk Access on the Mac. AI Agents Are the Reason. - URL: https://www.techbetweenthelines.com/apple-full-disk-access-mac-ai-agents/ - Published: 2026-10-12T18:00:00.000Z - Updated: 2026-10-12T18:00:00.000Z - Description: Apple says it will add new controls to Full Disk Access, the Mac permission that can expose your Mail, Messages and browsing history. Here is what is changing, what Apple hasn't said, and how to check your Mac today. - Author: Justin Scharlemann - Tags: Apple, Analysis, Apple OS 27 How many apps on your Mac can read your Messages history right now? Most people have no idea, and for years that was a fairly safe thing not to know. The list was usually a backup app, maybe a security tool, and Terminal if you write code. AI agents changed that, and on October 2 Apple said it is going to change how the permission behind it works. In a post on its developer news site titled [Updates to Full Disk Access in macOS](https://developer.apple.com/news/?id=p6zjojqw&ref=techbetweenthelines.com), Apple said it will add new controls to Full Disk Access, the Mac setting that lets an app reach almost everything on your startup drive. Apple didn't say when, and it didn't name a single app. It did say why. ## What Full Disk Access actually is Since macOS Mojave in 2018, the Mac has kept its most sensitive data behind a privacy system. Your Mail database, your Messages history, Safari's browsing history and other protected locations can't be read by an app just because it's installed. The app has to ask, and you have to approve. Full Disk Access is the exception to that system. Turn it on for an app in System Settings, under Privacy & Security, and that app can read nearly everything those protections normally guard. Apple is blunt about this in its own post: the setting largely sidesteps the Mac's data protections, and it exists so backup apps can work. A backup tool that can't see your Mail folder can't back it up. That trade made sense when the apps asking for it were backup tools and security software, apps with one well understood job. It makes much less sense when the app asking is an assistant designed to read your conversations and act on them. ## Why Apple is doing this now Apple's post says some developers are using Full Disk Access in ways that could expose users' files, mail, messages and browsing history without the user fully understanding what they agreed to. It adds a point that is easy to miss. For communication apps, the risk extends to the people you talk to. They never approved anything, yet their messages sit in your Messages database. Apple also warns that the risk grows as AI agents become more capable and more autonomous. Apple didn't name names, but the timing lines up with a wave of always running AI agents that want broad access to your Mac. John Gruber at Daring Fireball [connected the change](https://daringfireball.net/2026/10/apple%5Ffull%5Fdisk%5Faccess?ref=techbetweenthelines.com) to agents like Meta's Muse, and to Jason Aten's account of Muse reading his iMessages. The contrast with the iPhone is stark. On iOS, no permission lets a third party app read your iMessage or WhatsApp conversations at all. On the Mac, one switch can. ## What changes, and what Apple hasn't said Apple says users who genuinely want to give an app this level of access will still be able to, but only through "very explicit user action," and only after Apple makes the risks clear. That is nearly all the detail Apple has shared. A lot is still open. Apple hasn't said which macOS release brings the change, whether apps that already have Full Disk Access keep it or have to ask again, or what the new approval will look like. It also hasn't addressed managed Macs. Today, companies and schools can grant Full Disk Access to specific apps ahead of time with a privacy preferences profile pushed through their device management system, which is how backup and security tools get deployed across thousands of Macs without anyone clicking a prompt. If the new controls require an explicit action from the person at the keyboard, that workflow changes, and IT teams will want to know well before the update ships. Developers are in a similar spot. Apps that genuinely depend on this access, like backup, sync and security tools, will likely face a harder first launch, and Apple hasn't published new guidance for them yet. ## Check your Mac today You don't need to wait for Apple to see what you've already approved. It takes about a minute. 1. Open System Settings and click Privacy & Security in the sidebar. 2. Click Full Disk Access. 3. Read the list. Any app with its switch turned on can read nearly everything protected on your Mac. 4. For each one, ask whether its job actually requires that. Backup tools, disk utilities and some security apps do. A note taking app, a menu bar utility, or an AI assistant you tried once and forgot about probably doesn't. 5. Turn off anything you don't recognize or no longer use. If an app truly needs the access, it will ask again, and you can switch it back on. While you're there, look at Accessibility and Automation in the same Privacy & Security list. Those permissions let an app see what's on your screen and control other apps, which is exactly what an agent needs to act on your behalf. They deserve the same scrutiny. ## Where this goes next This is the first time Apple has narrowed a Mac permission specifically because of AI agents, and it is unlikely to be the last. The whole pitch of an agent is that it works across your apps for you, which means it needs exactly the kind of access Apple's privacy system was built to limit. That tension will draw criticism. Apple's own Siri AI gets personal context from Mail, Messages and Photos through the system itself, and some developers will argue that tightening the third party path conveniently favors Siri. Apple's position is that anyone can still get the access, as long as the person at the keyboard understands what they are handing over. Whether that holds up depends on details Apple hasn't shared yet. Until it does, the question worth asking is the same one this started with: which apps on your Mac can read your messages, and did you mean to let them? **Related:** how Apple wants AI to reach into apps through [App Intents and Siri AI](https://www.techbetweenthelines.com/app-intents-are-the-new-aso-how-siri-ai-will-discover-apps/), and everything that changed in [macOS 27 Golden Gate](https://www.techbetweenthelines.com/macos-27-golden-gate-is-out-siri-ai-comes-to-the-mac-and-intel-support-ends/). Read us first See more TBTL when you search Google Add Tech Between the Lines as a preferred source and our Apple coverage shows up more often in your Top Stories. It takes one tap, and you can change it anytime. [Prefer TBTL on Google](https://www.google.com/preferences/source?q=techbetweenthelines.com&ref=techbetweenthelines.com)