Apple’s Mac User Guide shows how to see and change which apps can open files in your Desktop, Documents and Downloads folders, using the Files & Folders list in Privacy & Security settings. The same screen holds Full Disk Access, the far broader permission Apple said on October 2, 2026 that it will put behind “very explicit user action.”
That makes this a good time to audit your Mac. Apps collect these permissions over months and years, and most people never go back to check what they agreed to.
Why this is worth checking now
On October 2, Apple told developers that Full Disk Access “largely sidesteps” the controls that protect users’ private data, and that it exists so backup apps can work properly on the Mac.
Don’t miss the best of The Mac Observer
Set us as a preferred source and our Apple reporting ranks higher in your Google Search results and Discover feed — one tap, no account changes.
Apple said some developers are using it in ways that could put users at risk, exposing everything on their systems, including “files, mail, messages, and even browsing history,” without users’ full knowledge and understanding. Apple also warned that the risks will grow as AI agents become more capable and autonomous. We covered that change when Apple announced it would restrict Mac disk access.
Apple has not given a date for the new controls. You do not need to wait for them to see which apps already have access.
How to check Files & Folders access
Files & Folders covers apps that asked to open files in specific places on your Mac, such as your Desktop, Downloads and Documents folders. Apple notes that some websites can request this access too.
- Choose Apple menu > System Settings.
- Click Privacy & Security in the sidebar. You may need to scroll down to find it.
- Click Files & Folders.
- Look through the list of apps.
- For each app, turn its access to specific locations on or off.
Apple describes the apps in this list as ones that have requested access, so an app you have not opened in a while can still be sitting here with permission to your folders.
How to check Full Disk Access
Full Disk Access sits in the same Privacy & Security section as Files & Folders. This is the list that matters most.
According to Apple, Full Disk Access lets an app see all files on your computer, including data from other apps such as Mail, Messages, Safari and Home, data from Time Machine backups, and certain administrative settings for all users on the Mac.
- Open System Settings > Privacy & Security.
- Click Full Disk Access.
- Review every app in the list.
Since Apple says this permission exists mainly for backup apps, anything on the list that is not a backup, security or system tool you knowingly installed deserves a closer look. Apple’s guide says you add an app to this list by clicking the add button, selecting the app and clicking Open.
Other permissions in the same section
Privacy & Security has several other lists worth a quick pass while you are there. Apple describes them like this:
| Setting | What it allows, per Apple |
|---|---|
| Files & Folders | Access to files and folders in different locations on the Mac |
| Full Disk Access | Access to all files, including data from other apps and Time Machine backups |
| Accessibility | Running scripts and system commands to control your Mac |
| Automation | Accessing and controlling other apps on your Mac |
| Input Monitoring | Monitoring mouse or trackpad input, and seeing what you type on the keyboard |
| Screen & System Audio Recording | Recording your screen and audio, or just audio |
| App Management | Updating or deleting other apps on your Mac |
Accessibility, Automation and Screen & System Audio Recording are the ones to watch if you use AI assistants or automation tools that act on your behalf. Between them, an app can see your screen and drive other apps.
What Apple says about third-party apps
Apple’s guide points out that if you allow third-party apps or websites to access your files and folders, any information they collect is governed by their own terms and privacy policies. Apple recommends learning about the privacy practices of those companies before granting access.
If your Mac is managed by a company or school, Apple points system administrators to its Apple Platform Deployment guide for deploying these security settings.
A quick routine
Make this part of your regular Mac maintenance, alongside software updates:
- Check Full Disk Access first, since it is the broadest permission.
- Check Files & Folders for apps you no longer use.
- Scan Accessibility, Automation and Screen & System Audio Recording for tools you have removed or forgotten.
- Delete apps you no longer need instead of only switching off their access.
Apple’s full steps are in its Mac User Guide article on controlling access to files and folders on Mac.
