Apple plans stricter Mac data access controls as AI privacy concerns grow

Apple said on October 2 that it plans stronger controls over full access to data on Mac computers, warning that increasingly autonomous artificial intelligence agents raise privacy risks. Reuters reported the announcement from San Francisco amid complaints about the Muse assistant from Meta, which disputes allegations of unauthorized message access.

Apple explained that Full Disk Access lets backup software bypass many normal privacy controls. Some developers use that permission in ways that can expose files, email, messages and browsing history without users fully understanding the consequences. The company said private conversations can also expose information about other people.

Reuters reported that Inc columnist Jason Aten accused Muse of reading private messages on his Mac despite his not enabling Full Disk Access. The complaint concerns an assistant that can handle tasks such as canceling unused subscriptions and negotiating prices. The accusation remains disputed, rather than an established finding of unauthorized access.

Meta spokesperson Andy Stone said last week that reading Messages through Muse requires users to enable both Full Disk Access and a separate Messages connector, according to Reuters. He said participation is voluntary and permission can be withdrawn at any time. Meta did not immediately provide Reuters with further comment.

Apple said future controls will require a more explicit action before an application receives such extensive access. Its stated aim is to help people understand the risks before deciding about their data. The announcement did not specify a release date or describe the final permission interface, leaving implementation details unresolved.

The company warned that more capable, independent AI agents will substantially increase the risks of broad access. Apple declined to comment beyond its statement, Reuters reported. The next step is the promised change to macOS controls; the announcement itself does not mean that new restrictions are already available on users’ computers.