Quick Answer
Apple will make Full Disk Access harder for Mac apps to obtain through explicit user action, Apple said on October 2, 2026. The permission largely bypasses normal privacy controls and can expose sensitive data. Review every app that already has Full Disk Access, but do not remove backup software before confirming how the app works on your Mac.
Key Takeaways
- Apple plans new controls that require very explicit user action before an app receives Full Disk Access.
- Full Disk Access can bypass normal macOS privacy protections for protected user data.
- Apple identified files, Mail, Messages, and browsing history as data that can be exposed through the permission.
- Apple linked the policy change to risks from increasingly capable and autonomous AI agents.
- Apple has not named a macOS version or release date for the new controls.
What Full Disk Access change did Apple announce?
Apple will introduce additional Full Disk Access controls that require “very explicit user action” before a Mac app receives the permission. Apple announced the policy direction on October 2, 2026, but did not identify a release date, a specific macOS version, or the exact interface users will see. Apple’s developer announcement describes the planned change.
Full Disk Access is an unusually broad permission because it allows an approved app to reach protected storage that standard macOS privacy controls normally restrict. Apple said the permission exists partly because backup applications need broad access to function properly. The new policy therefore does not mean every app with Full Disk Access is unsafe. The practical change is that Apple intends to make the approval decision more deliberate.
Mac users should treat the announcement as a reason to review existing permissions, not as a reason to remove access from every application immediately. A backup tool can fail to protect all of your data if its access is removed without checking its documentation or settings first.
Why is macOS Full Disk Access a privacy risk?
macOS Full Disk Access creates a substantial privacy risk because the permission largely bypasses ordinary macOS privacy controls. Apple warned that apps granted this access can expose files, Mail, Messages, and browsing history when developers use the permission in ways users do not fully understand. Apple’s Full Disk Access notice explains why the company is tightening the approval process.
The risk is not limited to the Mac owner’s own information. Apple said communication apps with Full Disk Access can also compromise the privacy of people with whom the user communicates. That matters because messages, attachments, and email histories often contain information about family members, coworkers, customers, and other contacts.
Full Disk Access should be limited to apps that have a clear, necessary reason to scan protected data. An unfamiliar utility, a newly installed communication app, or software that cannot explain why it needs the permission deserves closer scrutiny. The sensible response is to deny a new request until the app developer explains the need in documentation you can verify.
Why did Apple connect Full Disk Access to AI agents?
Apple connected the Full Disk Access policy change directly to the growing risk from more capable and autonomous AI agents. Apple did not name a specific AI product or identify a particular incident, but the company’s warning recognizes that software with broad access and the ability to act independently can create a wider privacy exposure than a conventional app.
An AI agent with broad storage access could encounter more personal material than a user intends to share with an assistant. The central concern is the combination of access and autonomy: Full Disk Access can reach protected information, while an agent may process information across tasks without the user reviewing each individual file or message first.
AI tools do not automatically require Full Disk Access, and a request for the permission does not by itself prove malicious behavior. However, Mac users should apply a higher standard before approving access for an assistant, automation tool, or communication service. Users who are already evaluating AI privacy settings and data sharing should use the same caution when an AI-related Mac app asks to inspect local files.
Where can Mac users review Full Disk Access now?
Mac users can review Full Disk Access in System Settings under Privacy & Security > Privacy on macOS 13 and later. Apple’s current security documentation also states that apps seeking full storage access must be explicitly added in the Privacy section on macOS 10.13 and later. Apple’s Platform Security guide documents the existing permission model.
The settings panel shows which applications have been approved for Full Disk Access. Review each entry by matching the app name to software you recognize and still use. An entry can be legitimate while still being unnecessary, particularly if you stopped using the associated app or replaced it with another tool.
Mac users should not assume that a permission is harmless because an app was installed months or years ago. Software updates can change features and data handling, while older unused applications can remain on a computer. Security updates also matter for trusted applications, as the need to update Mac desktop apps after security fixes shows.
Which apps deserve the closest Full Disk Access review?
Communication apps and backup apps deserve the closest Full Disk Access review because Apple specifically identified both categories when explaining the policy. Communication software can expose information belonging to other people, while backup software may need broad access to make complete copies of protected data. The same permission can therefore be appropriate for one app and excessive for another.
| App category | Why Full Disk Access may be requested | Main privacy consideration | Practical action |
|---|---|---|---|
| Backup app | Apple says broad access helps backup apps work properly. | Removing access can affect what the app can back up. | Confirm the app’s backup requirements before disabling access. |
| Communication app | Apple warns that access can reach sensitive communications. | Other people’s privacy can also be affected. | Approve only when the developer clearly explains the need. |
| AI agent or automation tool | Apple cited risks from more capable, autonomous agents. | Broad local access can increase the information an agent can process. | Deny the request unless the task requires it and the controls are clear. |
The table is a review guide, not a list of automatic removal targets. A backup app can be essential, while a communication or AI app may have a valid feature that requires broader local access. The important question is whether the access matches a feature you intentionally use and understand.
What does Apple still need to explain about the new controls?
Apple has not said whether the new Full Disk Access controls will affect permissions that users already granted. Apple also has not explained how the policy will apply to Macs managed through mobile device management, particular categories of apps, or a specific macOS release. Independent reporting on the announcement identifies those unresolved rollout details.
The lack of a release date means Mac users should not expect an immediate system behavior change. Existing Full Disk Access grants remain an important privacy consideration because Apple has not announced that the future controls will revoke, re-prompt for, or otherwise alter prior approvals.
Developers also have limited implementation detail at this stage. The practical response is to watch for a later Apple macOS release note or developer documentation before assuming that an application workflow, enterprise-managed device, or existing permission will change.
How should Mac users review Full Disk Access safely?
Mac users should review Full Disk Access by identifying each approved app, confirming why it needs the permission, and removing access only after checking the effect on important features. The process is useful because it reduces unnecessary exposure without disrupting a backup workflow or another task that genuinely relies on protected storage access.
- Open System Settings, then select Privacy & Security and Privacy.
- Open Full Disk Access and review every listed application.
- Confirm that you recognize the app and still use the feature that may require broad storage access.
- Read the developer’s documentation before changing access for a backup or communication app.
- Disable access for software you no longer use or cannot identify, then confirm that the Mac and any needed app features still work.
Back up important files before changing permissions for software that handles backups or essential work data. Stop and contact the app developer’s support team if removing Full Disk Access prevents an expected backup, synchronization, or communication feature from working. Users concerned that a Mac may already be compromised should also install relevant security updates, including protections discussed in coverage of the recent Mac zero-day patch.
What should Mac users do before Apple releases the new controls?
Mac users should audit existing Full Disk Access permissions now because Apple has not provided a release date for the stronger approval controls. The review takes place under the current macOS privacy model, and it gives users a clearer record of which apps can reach sensitive local data before Apple changes the process.
For most users, the priority is removing access from abandoned or unrecognized apps while preserving access for trusted software that needs it. Apple’s warning does not establish that all approved apps misuse Full Disk Access. Instead, it establishes that the permission is powerful enough to require a more explicit approval decision.
The most sensible approach is to approve access narrowly, reassess it after installing major new software, and avoid granting the permission simply to clear a prompt quickly. Apple’s future controls may improve the approval flow, but careful permission choices remain necessary for every Mac user.
FAQ
What is macOS Full Disk Access?
macOS Full Disk Access is a permission that allows an approved app to reach protected storage that normal macOS privacy controls restrict. Apple says the permission helps some backup apps work properly, but it can also expose sensitive personal data.
Will Apple remove Full Disk Access from existing Mac apps?
Apple has not said whether the new controls will affect existing Full Disk Access grants. Apple also has not explained how the policy will apply to managed Macs, particular app categories, or a specific macOS version.
Why are AI agents relevant to Full Disk Access?
AI agents are relevant because Apple linked the planned policy change to risks from increasingly capable and autonomous agents. Broad storage access can increase the personal information an agent can process during tasks.
Should I turn off Full Disk Access for every Mac app?
No, Mac users should not turn off Full Disk Access for every app without checking the consequences. Backup software may need broad access to work properly, so confirm the developer’s requirements before removing the permission.
Where is Full Disk Access in macOS settings?
Full Disk Access appears under System Settings > Privacy & Security > Privacy on macOS 13 and later. Apple says apps seeking full storage access must be explicitly added in the Privacy section on macOS 10.13 and later.