Sealby
Encrypted notes and files in one private vault
Keep IDs, PDFs, recovery details and personal writing outside ordinary photo, file and notes libraries.
Explore private notes and documentsEncryption
A helpful AI assistant on your computer sounds great — until you see how much it can read. In early October 2026, Apple said it would tighten a Mac setting called “Full Disk Access” because some new AI apps were reaching into private data they were never really meant to touch. It is a good moment to understand what these apps can see, and how to keep your most personal files to yourself.
Encrypted notes and files in one private vault
Keep IDs, PDFs, recovery details and personal writing outside ordinary photo, file and notes libraries.
Explore private notes and documentsConvenient for a small number of items
Useful and built in, but less comfortable for a larger mixed library of files and media.
Easy to reach from many devices
Check whether file contents are end-to-end encrypted and how account recovery works.
Convenient, not a separate private space
Content remains visible to the apps, accounts and device access that normally manage it.
Apple announced it will add stricter controls around a Mac permission called “Full Disk Access.” The change followed reports that a widely used AI assistant had read and indexed a person’s private messages without asking clearly first. Apple said that as AI assistants grow more capable and more independent, the risk of giving them this much access will keep growing — so it wants people to grant it only through a very clear, deliberate step.
Most apps can only see their own little corner of your computer. “Full Disk Access” is different: it is one switch that lets an app read almost everything — your documents, your mail, your chat history, your browsing. That is useful for a backup tool or a genuine assistant, but it is a lot of trust to hand over in a single click.
The point is not that the setting is bad. It is that it deserves a moment’s thought before you turn it on, and an occasional check afterwards to see who still has it.
Older apps with broad access usually did one narrow job. Many AI assistants are built to roam: they read whatever they can reach so they can be “contextual” and helpful, and increasingly they act on their own. That mix — broad access plus independent action — is why Apple singled them out. An assistant that can read your messages to summarise them can also copy or index them somewhere you did not expect.
On a Mac, open System Settings › Privacy & Security › Full Disk Access and review the list. Switch off anything that does not clearly need it. Be deliberate about new AI apps, too: a tool that wants to read everything should earn that trust first.
And keep your most sensitive files — identity documents, financial records, private notes — stored encrypted on your own device, so no other app can read them even if it has broad access to the rest of your system.
Keeping your most private files in a locked, encrypted vault is about to get easier. The Sealby app for Mac is planned for November 2026, bringing the same on-device, zero-knowledge protection to your computer. Content inside a locked vault remains encrypted at rest; this does not protect files you have opened or a compromised Mac.
This is general education, not security advice. Apple’s controls, app behaviour and the details described here change over time — check current, reputable sources and the settings on your own device.
No. This is about a permission that was granted — by you, or through an app’s request — not a break-in. The fix is to review those permissions and switch off any an app does not genuinely need.
It is a Mac permission that lets an app read almost everything on your computer at once — documents, mail, chat history, browsing. Most apps only need to see their own small corner, so this one is worth granting slowly and only to tools you trust.
No. Any system that lets an app read your files faces the same question. Apple’s move stands out because it is a large, mainstream change, but the lesson applies on every device: know what you are granting before you grant it.
Not necessarily. The goal is informed control, not fear. Grant broad access only to tools you trust, and keep your most private material — IDs, financial records, personal notes — stored separately, behind your own lock.
A genuine on-device, zero-knowledge vault keeps files encrypted and locked. Another app on the same computer sees only scrambled data, not your actual files — as long as the vault stays locked.
Download Sealby and protect what matters. Setup takes under a minute, and there’s no account to create.
iPhone & iPad · iOS 17+ · Free