Apple announced 'Updates to Full Disk Access in macOS' in early October 2026. The message cuts both ways: developers get powerful APIs to build capable Mac apps, backed by a set of controls designed to protect users — and Full Disk Access is moving to the stricter side of that balance.
What happened
Apple's Developer News post (October 3, 2026) frames the update as API power plus privacy control. Full Disk Access is the most privileged file-system entitlement on macOS: it lets an app read user data across the entire disk, including Mail, Messages, Safari data and Time Machine backups. Apple's direction is unambiguous — the entitlement is not going away, but the bar for requesting, granting and keeping it is rising, with privacy controls front and center. Expect review to look harder at why an app needs this level of access, not just whether it declared it.
Who's affected
Mac developers whose apps request Full Disk Access: backup tools, security and maintenance utilities, developer tooling, and anything that scans broadly across the file system. Apps currently in review — or planning an update that adds FDA — will feel this first.
KappS's take
- Audit whether you genuinely need FDA. If file pickers or security-scoped bookmarks cover the use case, drop the entitlement — it is the cleanest way to avoid review friction.
- Write the usage description like a feature spec, not a formality. Tie every sentence to a concrete, user-visible function; vague justifications invite follow-up questions.
- Prepare the necessity case before submitting. Keep an internal mapping of each FDA-dependent feature to the entitlement, so reviewer questions get answered in one round.