Apple announced on October 2 that it will introduce additional controls around Full Disk Access on macOS, citing new risks from AI agents. The permission lets an app read files, mail, messages and browsing history.

Apple said some developers are using the setting in ways that could put users at risk without their full understanding. Going forward, granting this level of access will require what Apple calls very explicit user action.

The announcement followed a report that Meta’s Muse AI agent had accessed a journalist’s private messages on a Mac. Columnist Jason Aten said the agent referenced his message content despite him denying permission. Meta disputed the claim.

Apple also noted the risks will grow as AI agents become more capable and autonomous. The company did not say when the new controls will take effect.

The move comes days after a Wired report described a flaw in ChatGPT’s Mac app that could have exposed sensitive data. Apple says the permission was originally designed for backup software.