[REVISION HISTORY]

Tech industry tightening data permission controls

Updated 7 times since CLSTR started tracking revisions of this situation.

What changed

2026-10-05 04:28 UTC → 2026-10-06 14:56 UTC · added ~~removed~~

Apple is implementing updates to macOS Full Disk Access (FDA) permissions to mitigate privacy risks posed by increasingly autonomous AI agents. These tools have the potential to access sensitive user data, including files, emails, messages, and browsing history. The decision follows controversies regarding how third-party applications, specifically AI assistants, utilize high-level system permissions. This includes reports involving Meta’s Muse AI agent, which was accused of accessing private messages without explicit authorization. While Meta has disputed these claims—stating that access to Messages is strictly opt-in and requires both FDA and a specific Messages connector—security experts have argued that granting FDA allows applications to read nearly all non-root files, such as cookies and chat logs. In a recent development, Amazon has reportedly blocked Meta’s Muse from its platform, citing a need for applications to respect service provider decisions. Apple’s new policy aims to ensure users are fully informed of the risks before granting such extensive permissions. The company noted that ~~as AI capabilities grow,~~ while FDA is necessary for certain applications like backup software, the potential for misuse of system data increases ~~significantly.~~ as AI capabilities grow. To address these risks, Apple intends to introduce new controls requiring ‘very explicit user action’ and more explicit, step-by-step confirmation prompts before an application can be granted such extensive system access. This adjustment seeks to prevent developers from exposing user data without clear, informed consent. In a broader industry context, Google is also addressing data permission vulnerabilities. On Android, hackers have been exploiting Accessibility Services to facilitate banking trojans and overlay attacks. In response, Google is introducing stricter limitations for apps requesting these services in Android 17 under Advanced Protection mode.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.