Apple Enhances macOS Privacy Settings to Prevent AI Tools From Reading Messages

Apple disclosed an update to the macOS privacy architecture designed to stop third‑party apps from leveraging full‑disk access rights to pull users' message histories. The modification, outlined in a developer‑oriented release note on Friday, revises the OS’s consent framework so that applications must obtain clear user permission before they can read the Messages database, a protection aimed at curbing recent abuse by AI‑driven services.

The change was prompted after technology columnist Jason Aten demonstrated that Meta’s freshly launched AI assistant, Muse, could access his private iMessage exchanges once he granted the program extensive disk‑access privileges. Aten’s case exposed a flaw in Apple’s prior permission prompts, which let developers request a single “full‑disk access” entitlement that covered a range of data stores, including messages, photos and documents.

Under the new policy, message data is no longer bundled with the generic full‑disk permission; developers must now issue a separate request for Messages access. Apple says the revised dialog will plainly state which information will be read and why, and it will appear only when an app actually tries to query the Messages database. Users will also keep the option to withdraw this permission at any moment through System Settings.

Privacy advocates have welcomed the move as a vital response in an age where generative AI features are increasingly embedded in everyday software. The capacity of AI agents to consume personal communications raises worries about accidental data leakage, profiling, and the compilation of training datasets without user consent. By tightening the permission flow, Apple intends to provide finer‑grained control and lower the chance of unintended data exposure.

Developers, however, will likely need to modify their apps to meet the new standards. Apple’s documentation notes that any application presently using the broad full‑disk entitlement to read messages will be flagged in the upcoming App Store review cycle, and non‑compliant versions could be pulled from distribution. The company has granted a transition window until the rollout of macOS 15, slated for later this year, to let developers adjust their code and user‑experience designs.

Industry watchers observe that Apple’s step mirrors a wider trend among platform owners to enforce stricter data‑access policies as AI capabilities expand. While the immediate effect is confined to macOS, comparable privacy tweaks are expected on iOS and iPadOS, where messaging data is equally sensitive. These forthcoming changes may set a benchmark for how operating systems reconcile AI convenience with the need to safeguard user privacy.