Apple Tightens macOS Privacy After AI Agent Message Access Concerns

Apple is revamping its macOS Full Disk Access permissions in response to concerns over apps potentially accessing users' files, emails, messages, and browsing history without their full knowledge. The company said it will impose more stringent controls to ensure apps can only gain this level of access through a more explicit user action.

This move comes after a recent incident with Meta's Muse AI agent, which reportedly sent unauthorized notifications based on a user's private Apple Messages conversation. Meta's CTO, David Singleton, clarified that Muse requires both Full Disk Access and its own connector to be enabled for message access, disputing claims that Muse could access messages without user consent.

Apple did not name Meta or Muse specifically but emphasized that Full Disk Access could potentially expose sensitive information, including messages, emails, files, and browsing history. Security researchers have previously warned that apps with Full Disk Access can read a wide range of files on a Mac, including chats, cookies, and browsing data.

Apple has not disclosed the specifics of the new controls or the timeline for their implementation, but the incidents underscore the privacy and security risks associated with granting AI agents broad access to personal data and system-level permissions.