Apple flags Full Disk Access as too broad

Apple told developers on 2 October 2026 that it will tighten Full Disk Access on macOS. The Developer News note is titled "Updates to Full Disk Access in macOS."

Full Disk Access, Apple says, "largely sidesteps" the privacy controls that protect private data on the Mac. It exists so backup apps can work. Apple says some developers use it in ways that can put users at risk.

The note lists files, mail, messages and browsing history among what that permission can expose. For communication apps, Apple says it can also compromise the privacy of people the user is messaging.

Apple Security and Privacy, and every Mac agent builder

Apple owns the macOS permission model and the coming controls. The note does not name a ship date or a macOS version.

Any Mac app that asks for Full Disk Access is in scope, including AI agents and coding tools that browse a user's disk. Communication apps that use the permission are called out for the risk to third parties.

Apple's other AI access decisions also split by region. See Apple opens Siri AI to developers and withholds it from EU iPhone.

Explicit consent before extraordinary access

Apple says it will "introduce additional controls" so users who want to grant that level of access can do so only with "very explicit user action."

The note ties the change to AI agents: "As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially."

Apple says it wants users to understand those risks before they grant access.

No timeline and no API list

The note does not say which macOS release will carry the change. It does not list APIs that will change, or which apps already misuse the permission.

It also does not say whether existing grants will be revoked, re-prompted or left alone until the user changes them.

Agent builders should plan for a re-prompt

  • Mac AI agent and coding-tool makers should inventory any Full Disk Access entitlement and prepare a clearer consent flow.
  • Enterprise Mac admins should expect users to be asked again before agents can read mail, messages or full disk paths.
  • Backup vendors that rely on Full Disk Access should watch for migration guidance in a later release note.

Apple has not published a follow-up tech note with the control design.