Apple Tightens Full Disk Access Rules After Concerns About AI Agent Data Access

Summary

Apple says it will change macOS Full Disk Access (FDA) permissions after concerns that third-party apps can use the privilege to reach files, mail, messages, browsing history, and other sensitive data. The announcement followed a report by columnist Jason Aten that Meta’s Muse AI agent sent him an unsolicited notification referring to an Apple Messages conversation that he said he had never authorized Muse to read. Meta CTO David Singleton said the Messages integration is opt-in and requires both FDA and a separate Messages connector. Security researcher Patrick Wardle disputed the practical force of that distinction, arguing that FDA allows an app to read any non-root file, including chat databases and browser data. Apple did not name Meta or Muse, and it did not confirm that its announcement was prompted by the incident, although the timing suggested a connection. Apple said the risks will increase as AI agents become more capable and autonomous, and that users need clearer information before granting such access. The article also notes that Wardle had disclosed a Muse configuration that could let any app or injected command take control of the assistant and access its resources. Amazon separately blocked Muse from its platform, citing the need for such apps to respect service-provider decisions. The article concludes that Muse users should configure permissions carefully, while acknowledging that permission choices may not eliminate all risk.