Apple plans stronger Full Disk Access controls as AI agents grow
Apple says future macOS controls will require explicit action before apps receive Full Disk Access, citing growing risks from autonomous AI agents.

Apple plans to add controls around Full Disk Access on the Mac as increasingly autonomous AI agents raise the risks of broad file permissions. Its October 2 developer notice says granting that access will require explicit user action.
Apple says the permission supports backup software by bypassing many normal data controls. It warns that some developers use it in ways users may not fully understand, putting private information and the privacy of people they communicate with at risk.
The announcement gives no release date or technical design. It does not describe a shipped feature or identify particular apps affected by the change.
What Full Disk Access already permits
Apple’s current Mac user guide describes a permission that reaches files across the computer, including data from Mail, Messages, Safari and Home, Time Machine backups and certain administrative settings. That scope helps explain why granting access deserves more attention than simply accepting a routine setup step.
The existing protections already require consent. Apple’s platform security documentation says apps needing full storage access must be explicitly added in system settings. It also describes consent requirements for locations such as Documents, Downloads, Desktop, iCloud Drive and network volumes, alongside separate permissions for accessibility and automation.
The Mac guide places these controls in System Settings under Privacy and Security. Full Disk Access, Files and Folders, Accessibility and Automation appear as separate entries. Their different scopes matter when evaluating what an agent needs to complete a particular task.
Review the task before granting access
For users, a useful starting point is to ask the app developer which files a feature needs and why. A request to organize one project deserves an explanation if the setup also asks for access to unrelated correspondence and backups. Check whether the app offers a narrower way to do the job.
Developers have a similar preparation task. Document which features depend on broad permissions, explain that dependency plainly and make the experience understandable when users decline. Clear permission requests can help people judge the tradeoff even before Apple publishes the promised controls.
For a separate view of AI activity on a Mac, ByteForward’s AIRer beta coverage explains a utility for reading exported Apple Intelligence reports. Reviewing recorded model requests and deciding which apps may access stored data answer different privacy questions.
Featured artwork is an original AI generated conceptual illustration of human consent and file access.



