Apple is tightening how apps obtain Full Disk Access on Mac, making it harder for AI assistants to access personal files without users fully understanding what they’re allowing.
The company has warned that AI apps could expose private messages, emails, browsing history, and personal files without users fully realizing it. Now, macOS 27.3 is beginning to show how Apple plans to tackle the problem.
Full Disk Access is one of macOS’s most powerful permissions. It allows apps to read sensitive information, including messages, browser history, and files that would otherwise be protected.
As AI agents become better at searching files and performing tasks independently, Apple wants users to have more control over that access.
Apple Is Closing a Shortcut to Full Disk Access
Currently, when an app attempts to open a protected file without permission, macOS blocks the request but automatically adds the app to the Full Disk Access list in System Settings.
Developers can then direct users to that screen, where enabling access requires little more than flipping a switch.
Many AI assistants have used this process to request the extensive permissions they need to work with personal data.
With macOS 27.3, apps will no longer be automatically added to the Full Disk Access list after a denied request.
Instead, the system will reject unauthorized access without making it easier for the app to obtain permission afterward.
That adds friction to the process and makes it less likely that users will grant sweeping access simply by following an application’s prompts.
However, the restriction doesn’t eliminate every way to enable the permission.
Users can still manually drag an app into the Full Disk Access settings panel, and that method reportedly still works in current development builds.
It’s unclear whether Apple intends to restrict that option before the update is released.
AI Assistants Still Need Access to Sensitive Information
The bigger challenge is that some AI agents rely on Full Disk Access to perform tasks users actually want.
For example, an assistant that searches or summarizes iMessage conversations may need access to the Messages database.
macOS currently doesn’t offer a dedicated permission that lets an app read only that database.
As a result, users must choose between granting access to a much broader collection of personal files or giving up the feature.
Apple’s upcoming restrictions could make that decision more deliberate, but they won’t necessarily solve the underlying problem.
Apple Could Introduce More Granular File Permissions
Code references in macOS 27.3 also point to a possible feature called Private Folders, which could give users more control over which files an app can access.
Rather than granting permission to the entire disk, users might eventually be able to authorize access to specific folders.
That could be particularly useful for AI assistants that need information from one location without requiring unrestricted access to everything else.
However, Apple hasn’t explained how Private Folders would work or confirmed whether it could provide access to protected databases such as iMessage.
Apple is still developing the Full Disk Access restrictions, and it hasn’t confirmed whether they’ll be included in the final version of macOS 27.3.
If they arrive as expected, Mac users should have more deliberate control over one of the most sensitive permissions available to third-party apps.
