Full Disk Access is a macOS privacy permission that lets an app read many files and data stores on the local system beyond what ordinary file permissions would allow. It can include documents, messages, backups, and other sensitive application data, depending on what the app can reach and what macOS protects through its consent framework.
It matters because this is one of the broadest local privileges on a Mac. Legitimate tools such as backup, security, and management software may need it, but malware and overly powerful automation tools also benefit from it. Attackers who gain Full Disk Access can harvest sensitive data, search for credentials, or exfiltrate private content at scale. Defenders should review which apps hold the permission, remove unnecessary grants, and treat AI agents or automation utilities as privileged software. In managed environments, enforce policy for Full Disk Access alongside Accessibility and Automation permissions.