Following allegations from a journalist that Meta’s Muse app on Mac accessed private messages without consent — a claim Meta denied — Apple has announced plans to enhance controls regarding “Full Disk Access” on macOS. This feature was originally intended to ensure proper functioning of backups, but Apple stated that the rise of AI agents has increased the potential security risks linked to this level of access.
Apple’s announcement came on the heels of a report from Inc. columnist Jason Aten, who asserted that Muse was aware of his private message content without his authorization. This situation raised concerns about user trust and security in desktop AI, which has the capability to manage system functions and access personal files and messages.
This move to restrict the Mac feature also follows a Wired report highlighting a vulnerability in the ChatGPT Mac application that could potentially expose sensitive information to hackers.
AI applications operating on desktops allow users to grant these programs extensive access to their files, messages, and personal data by changing settings within macOS.
In the case of Muse, the AI provides an option for users to grant Full Disk Access. According to Apple, this setting allows an application to access files, emails, messages, and browsing history.
“Some developers are utilizing Full Disk Access in ways that may jeopardize user security by exposing all files without adequate user awareness and understanding,” Apple noted in a recent blog directed at developers.
Looking ahead, Apple plans to implement new controls that ensure users who genuinely want to give an app this significant level of access can only do so through “very explicit user action.”
“This issue is crucial to address. As AI agents become more capable and autonomous, the associated risks will substantially increase. We are dedicated to making sure users fully comprehend these risks prior to allowing such access, enabling them to make informed choices regarding their data and privacy,” Apple stated.
Apple did not provide a response to inquiries regarding the changes to the feature.
