Apple to Tighten macOS Data Access Controls Following AI Agent Privacy Concerns
Apple is set to implement stricter controls on its macOS operating system to limit how third-party AI agents access user data. The move follows public criticism regarding Meta's AI agent, Muse, which some users claimed accessed private messages and other sensitive information without explicit authorization. Unlike Apple's mobile platforms, which utilize sandboxing to prevent apps from accessing data across other applications by default, macOS currently offers a Full Disk Access feature that allows permitted apps to read system-wide files, including mail, messages, and browsing history.
Muse adoption topped 2.5 million downloads in two weeks. According to Inc. magazine columnist Jason Aten, Meta's Muse agent accessed his private Messages history on his Mac despite his declining to grant the app access during setup.
Apple will limit Full Disk Access to reflect growing industry concerns regarding AI systems having unchecked access to desktop operating systems.
Addressing AI Agent Risks
In an update posted to its developer portal, Apple acknowledged that the Full Disk Access feature, originally intended for backup services, is being utilized by some developers in ways that pose significant privacy risks. The company stated that as AI agents become more autonomous and capable, the potential for unauthorized data exposure grows. Apple plans to introduce new controls requiring explicit user action before granting this level of system access, ensuring that users can make informed decisions about their privacy.
Dispute Over Data Access
The announcement follows reports from users, including a technology columnist who alleged that Meta's Muse read private messages despite the user not enabling Full Disk Access. Another user reported that the agent mishandled a Facebook Marketplace transaction, resulting in the exposure of their home address. Meta spokesperson Andy Stone disputed these claims, asserting that Muse's access to the Messages app is strictly opt-in. Stone stated that users must manually enable both Full Disk Access and a specific Messages connector for the agent to read content, and that this permission can be revoked at any time. Apple has declined to provide further comment beyond its official statement.