Claude desktop app reportedly exposes folder names before folder access
A Reddit user quoted a Claude conversation saying the desktop app could list folder names even when no specific folders had been authorized. The conversation said files, file contents, and opened items remained inaccessible, while the user also claimed that the apparent permission could not be disabled; that claim was not independently verified.
The reported behavior raises a privacy and permission-design concern because directory names may reveal information before users authorize access to the folders containing it.
For some reason Claude never looks in my project's context area first, and defaults to scanning my computer for the folder I mentioned in the prompt, which is how I found out it has the ability to read folder names without being granted access to my computer or a particular folder.
From a Claude conversation: "Through the Claude desktop app, which links this chat to your computer. That link lets me list folders, but until you grant access to a specific one I only get folder names: no files, no file contents, nothing opened."
"What I know for sure is that I could see your home folder’s top-level names and the subfolder names inside the handful of places I checked."
"But what the [Anthropic help] docs don’t spell out is that, even with zero authorized folders, I could still see folder names outside them."
While it can't see files or their contents, it's surprising the app has this permission that apparently can't be disabled. And at the end of the day my convos share a lot more about me than folder names do.