Developing
Apple gave no release date, macOS version or mechanism, and named no developer.
In 60 seconds
- Apple published "Updates to Full Disk Access in macOS" on October 2, 2026, a notice of under 200 words.
- It says some developers use the permission in ways that could expose files, mail, messages and browsing history without users' full knowledge.
- New controls will require "very explicit user action", and Apple says the risks "will grow substantially" with more autonomous AI agents.
- The notice gives no date, version, mechanism or named app.
Impact Layer
- What changed
- Apple has signalled it will tighten the permission that desktop AI agents most often need to read local data.
- Why it matters
- Agents that read messages, mail and files depend on this permission, so the change could limit what they can do on a Mac.
- Who is affected
- Mac app developers, IT administrators and companies shipping desktop agents.
- Martech stack area
- AI
- Stack impact
- If your product relies on Full Disk Access, plan for a more explicit grant flow and check how managed (MDM) deployments are handled once Apple publishes details.
- Business impact
- Moderate Based on PPC Land's reading of Apple's short notice. Whether MDM grants or Apple's own assistants are affected is not stated.
- Related technologies
- What to watch
- The macOS release that carries the change, and how MDM profiles are treated.
Apple published a short developer notice, “Updates to Full Disk Access in macOS”, on October 2, 2026, according to PPC Land. Full Disk Access is the macOS permission that lets an app bypass the system’s usual privacy safeguards.
What Apple said
- The permission “largely sidesteps” normal controls so backup apps can work properly.
- Some developers use it in ways that could expose files, mail, messages and browsing history “without users’ full knowledge and understanding”, and communication apps can affect people beyond the account holder.
- Apple will add controls so users can grant it only through “very explicit user action”.
- The risks “will grow substantially” as AI agents become more capable and autonomous.
What it leaves out
There is no release date, macOS version or mechanism, no named developer or app, and no statement on whether IT-administrator grants or Apple’s own assistant features are affected.
The dispute behind it
Meta released its Muse agent in the US on September 8. On September 28 AppleInsider reported a columnist’s account that Muse synced about 187,000 lines of his Messages database although he said he had kept Full Disk Access off. Meta’s Andy Stone said the Messages integration is opt-in and needs both the permission and an in-app connector. The sources do not reconcile the accounts.
Our read
Apple’s wording points at agents, not just backup tools. Build for an explicit, revocable grant and keep a record of what your agent reads.
Sources
- PPC Land: Mac developers face new Full Disk Access controls from Apple, no date set (opens in a new tab)
Source of the notice contents, what it omits, and the Meta Muse dispute that surrounds it.