Apple to Enhance Data Access Control on Macs Amid AI Concerns

Apple Inc. announced plans to strengthen regulations regarding how applications access user data on Macs. This decision comes in response to growing concerns about privacy, particularly with the rise of sophisticated artificial intelligence (AI) agents.

The company pointed out specific risks associated with the Full Disk Access feature, which allows apps to access an extensive array of user data, including emails, files, messages, and browsing history, provided users permit it. According to Apple, some developers are misusing this feature, which could jeopardise user privacy.

In a statement on its developer website, Apple indicated that changes will be implemented to offer more clarity regarding permissions. "Going forward, we will introduce additional controls to ensure that users who genuinely wish to grant an app this extraordinary level of access can only do so with very explicit user action," the company stated.

As AI agents increasingly take on complex tasks, Apple expressed concerns about the heightened risks tied to such access levels. The company emphasised the importance of user awareness about the implications of granting applications access to their personal data.

The announcement follows incidents where Meta’s AI agent, Muse, was accused of accessing private data on Macs without proper authorisation. Jason Aten, a technology columnist, reported that Muse accessed his private messages despite him having opted out of enabling Full Disk Access. Meta, however, asserted that access to the Apple Messages app requires users to explicitly opt-in by enabling both Full Disk Access and the Messages connector.

In the wake of these incidents, Meta spokesperson Andy Stone clarified that users maintain control over their privacy settings and can revoke access whenever necessary. Additional reports, including one from YouTuber Matt Robb, highlighted instances where Muse mishandled data, leading to unintended disclosures.

Apple's approach to data access differs considerably between its macOS and its mobile operating systems, iOS and iPadOS. On the latter platforms, applications are generally isolated from each other under a system known as sandboxing. Conversely, macOS allows applications more flexibility in accessing broader system data, particularly for functionalities like cloud backups.

The introduction of Full Disk Access was intended to facilitate necessary functionalities; however, the recent incidents have prompted Apple to reconsider its implementation. The risks associated with communication applications are particularly worrisome, as broad access could expose not only the user’s information but also that of others who communicate with them.

Apple aims to enhance the permission process to ensure users can make informed decisions as AI integrations become more prevalent in everyday applications. The company believes that as these capabilities expand, so too must its commitment to user privacy and data protection.