On 2 October 2026 Apple posted a developer note titled “Updates to Full Disk Access in macOS.” Full Disk Access exists so backup apps can read the disk. Apple says some developers use it in ways that expose files, mail, messages, and browsing history without users fully understanding that. For chat apps, Apple adds that this can also expose the other person’s side of a conversation.
Apple’s description of what changes is short. It will introduce additional controls so this access “can only be granted with very explicit user action.” It names AI agents as one reason the risk is growing. It does not say what the dialog will look like, which macOS version gets it, or when it ships.
Nothing breaks on Monday. The grant you already clicked is the thing to review.
What actually happened
The setting has always been broad. One toggle can reach data that normally sits behind separate prompts, including Mail, Messages, photos, and browser data, if the app knows the paths. Apple says the control was built for backups and that it largely sidesteps the usual privacy prompts.
The note is a warning to developers, not a release note. Macworld, The Verge, and TechCrunch all read it the same way: tighter controls are coming, while the form and date remain unknown. The timing sits near reports that a local agent app surfaced message contents a user did not think they had shared. Apple does not name that app. The policy text stands without it.
Why a small team cares
A solo on a Mac who let Claude Code, a local file agent, or a “search my whole computer” tool have Full Disk Access during setup is the person this hits. When the new control arrives, install guides and client handoffs that say “tick Full Disk Access” may fail or trigger a harder prompt. Some scheduled jobs that assumed the old toggle may stop seeing Mail, Messages, or browser data.
That is a later break, not this week’s outage. The useful work now is a list: which apps have the switch, which are backups you meant to allow, and which are agents you clicked through. Revoke the ones you cannot explain. Leave the ones you can explain until Apple shows the new control.
Hype vs useful
Useful: Apple has said the one-toggle path is ending, and it has said why. An audit of current grants is the only action that matches the note.
Not useful: ripping out local agents, buying a new permission product, or rewriting setup docs around a dialog nobody has seen. There is no ship date. Watch the developer note. Change client setup guidance only if you currently tell people to enable Full Disk Access by default.