Apple is overhauling how Full Disk Access (FDA) is granted in macOS 27.3 — changes aimed squarely at reducing the risks posed by AI agents accessing sensitive data without proper oversight. These updates are part of a broader push to tighten privacy controls in response to growing concerns that apps are requesting FDA and then overstepping those permissions with ends users may not fully understand. The new rules, launching in macOS 27.3, promise stricter requirements for what Apple calls “very explicit user action.”
What’s Changing
Currently, when an app tries to access a protected file (for example, from a user’s iMessage database), macOS blocks the request if the app lacks FDA and then logs that app in the system Settings as being eligible for FDA. From there, many apps prompt users to visit Settings and flip a toggle to grant access.
In macOS 27.3, this behavior shifts. When an app requests files outside its current permissions, the system will now automatically deny that request, but it will no longer log the app for FDA in Settings. That means it won’t appear as a quick-pick option for granting full access. In effect, the shortcut users followed today to grant FDA will be removed. Enabling FDA will require more deliberate action than before.
Why This Matters — iMessage, AI Agents, and Private Data
Many developers seek FDA so their apps or AI agents can access data like iMessage histories, notes, and other personal files. Under the old system, FDA could be enabled too easily, often without full awareness of the privacy risks. The changes in 27.3 aim to close a loophole that developers were using to simplify FDA requests.
An additional proposal within Apple’s near-future plans is something called “Private Folders.” These would theoretically allow users to grant applications access to specific directories (like where iMessage stores data) without handing over full disk permissions. The details are still murky — what exactly constitutes a Private Folder, how wide its scope will be, and which APIs will support it aren’t yet certain.
It’s also worth noting that even after the changes land, developers may still prompt users to manually drag app icons into the Full Disk Access section of Settings. While less streamlined than before, this method apparently remains possible under certain conditions during testing phases — though whether it’ll be required later or replaced entirely remains to be seen.
While the term “very explicit user action” is central to Apple’s framing, these upcoming changes are only a partial realization of that goal. By removing automatic logging of FDA requests, Apple is making it less tempting for developers to depend on broad access, and pushing users to make more conscious permission decisions.
These changes will roll out as part of macOS 27.3. As with Apple’s earlier privacy initiatives, including app tracking transparency and sandboxing, the shift toward more granular control over disk access underscores Apple’s balancing act between user privacy and the utility of AI applications.
Analytical Take: What Apple is doing here responds directly to concerns that Full Disk Access had become too permissive — especially in the era of AI agents seeking insight into deeply personal content like iMessages. These changes may frustrate some developers who rely on FDA for data access, but they’re also likely to strengthen trust among users wary of privacy risks. What to watch: how developers adapt—will they push more to use Private Folders effectively, or press for API changes? And will those “very explicit actions” evolve in upcoming betas to be more restrictive still? The choices Apple makes will shape not just its platform’s privacy posture, but set expectations industry-wide.
