🔍 Read the full analysis: How Much Can Meta’s AI Agent See If You Avoid Muse? on ThorstenMeyerAI.com
Prime made for students and young adults
- Fast, free delivery for dorm and study essentials
- Prime Video and Amazon Music included
- Member-only deals
TL;DR
Meta’s Muse personal AI agent can use information available through its user’s connected services, including Meta accounts and, when enabled, email and Mac Messages. Reports by WIRED and TIME say its instructions direct it to maintain hourly updated pages about people named in messages; Meta did not dispute those findings and says users control Muse’s access. Non-users have limited control over information in someone else’s account.
Meta’s Muse can access information through services connected by its user, and reports by WIRED and TIME say its internal instructions direct it to keep updated pages about people mentioned in messages and emails—including people who never signed up. Meta did not dispute the reported instructions; it says each user controls what Muse can access, leaving open how much control non-users have over information in someone else’s account.
Muse is a personal AI agent that Meta says can handle tasks such as email, bookings and shopping. Its access depends on connectors, or links to other services. Meta’s help information says connecting email lets Muse search it, but does not download the whole inbox unless the user asks. Calendar connectors may send updates to Muse proactively.
Meta says Facebook, Instagram and Threads connect automatically when they share an Accounts Center with Muse. Meta Chief AI Officer Alexandr Wang has said the Instagram connector includes direct messages and that Messenger has a connector. The source report says Meta’s help pages do not spell out the full scope of those connectors. Mac Messages requires the user to grant Full Disk Access on macOS and enable the connector. Meta warns that it does not review custom connectors.
WIRED reported on October 3 that Muse instructions include creating “a page for every person in the user’s life.” TIME separately reported three days later that Muse updates files hourly on the user and people named in chats, messages and emails, recording details such as shared interests, disputes and relationships. The source says Meta did not dispute TIME’s findings. These are findings from reports about Muse’s instructions, not a complete public account of what information is collected in every case.
Infographic 01 · What Muse can read
Muse reads what its user can read. That includes you.
Connectors decide what the agent sees. The user switches them on. The people in that user’s chats and inbox are never asked.
Sources a Muse user can open to the agent
The agent reads what its user can read. Everyone who writes to that user is inside.
| Source | How it connects | Status |
|---|---|---|
| Email (Gmail, Outlook) | Opt-in connector. Searches when a task needs it; downloads the whole inbox only if told to. | Meta document |
| Calendar | Opt-in connector. Can push changes to Muse on its own (“proactive”). | Meta document |
| Facebook, Instagram, Threads | Connected automatically if the accounts share an Accounts Center with Muse. | Meta document |
| Instagram DMs, Messenger | Named as Muse-only connectors (“Instagram (incl dm’s) … and Messenger”). What they read is not documented. | executive post |
| Mac Messages (iMessage) | Only with macOS Full Disk Access plus the Messages connector, Meta says. One columnist says it synced anyway. | disputed case |
| A place to chat with Muse, not a connector. Test-build text mentions Muse access to end-to-end encrypted chats. | leaked code | |
| Custom connectors | Muse can build links to other services. Meta does not review them. | Meta document |
What the instructions say
Extracted by researchers; reported by WIRED and TIME reported
- “A page for every person in the user’s life”: family, partners, friends, colleagues, people followed
- Notes on how people met, shared interests, disputes, “tensions and alliances”
- People who never signed up are mapped by other users’ agents
- De-identified “lessons” shared across agents; Meta did not dispute TIME’s findings
What Meta says
Privacy policy, help pages, spokespeople Meta document
- Each user’s VM is isolated; no other user’s agent can reach it
- Conversations and VM data are not shared with Meta’s ad systems
- “Each person stays in control of their Muse and decides how much access it gets”
- Forgetting works “to the best of its ability”; deleted data may still be remembered
Sources: Meta Help Center: Connectors; Muse Privacy Policy; Alexandr Wang on X (8 Sep 2026); TIME (6 Oct 2026); Tom’s Guide on WIRED’s report (6 Oct 2026); TechCrunch (30 Sep 2026); Digit (16 Oct 2026). Status labels: Meta document = stated by Meta; executive post = Meta executive on X, not in help pages; disputed = claim and denial on record; leaked = unreleased code, may never ship.
Powered by Thorsten Meyer AI
Non-Users Have Less Control
The reports highlight a privacy issue that extends beyond the person who installs an AI agent. When a Muse user connects services or asks it to work with their communications, other people’s messages and personal details may become information the agent can search, summarize or retain. A person who never enrolled may still be mentioned in material available to someone else’s Muse.
That creates an imbalance in control: the account holder chooses the connectors, while people on the other side of a conversation may have few direct ways to prevent their information from appearing in that account. The practical scope depends on which sources are connected and how Muse handles specific data. Meta’s privacy policy, as described in the source, includes “information about you or others,” but that wording alone does not establish what is retained about any particular person.
The timing also matters for users weighing the service’s growth and business ties. Meta announced Muse’s Singapore launch on October 27. The source reports a $25 billion stock sale at $625 a share, alongside $12.5 billion in preferred stock, and says Nvidia is investing $3 billion while Meta expands work on Muse. Those figures describe financing and partnership context; they do not by themselves establish how Muse’s privacy practices will change.
Popular right now
Shark Navigator Lift-Away Upright Vacuum (NV360)
Philips 5500 Series Fully Automatic Espresso Machine with LatteGo
Philips 3300 Series Fully Automatic Espresso Machine with LatteGo Milk System
As an affiliate, we earn on qualifying purchases.
Muse’s Connectors and Launches
Meta launched Muse in the United States on September 8, 2026, according to the source, and described it as “the world’s first personal AI agent built for everyone.” Japan followed on October 23, and Meta announced Singapore on October 27. TIME reported more than five million downloads within weeks; that figure is attributed to TIME, and the source does not provide a measurement method.
Meta describes a separate “Muse Secure VM”, a virtual computer for each user, and says another user’s agent cannot access it. That claim concerns separation between agents; it does not resolve what information one user’s Muse can process from that user’s connected accounts. Meta also says Muse can be opened in WhatsApp, but there it is a chat users start—not a reader of their other WhatsApp conversations, according to the source.
Users have several controls described in Meta’s help information: disconnect connectors, turn off model training, edit the memory file or reset Muse. The source says model training is on by default. Meta’s help pages say Muse forgets information “to the best of its ability” and may still remember information after deletion. That distinction means a user-facing forget or delete action should not automatically be read as proof that every derived detail has been erased.
““They’re trying to know you like a friend, which is honestly pretty creepy.””
— Karan Joshi, security researcher, quoted by WIRED
What Muse Retains About Others
The public information cited in the source does not establish exactly what Muse stores about a non-user, how long each detail remains, or whether and when a person can get information about them removed from someone else’s agent. The reported hourly updates describe Muse’s instructions, but the source does not document how consistently the instructions operate in practice or what safeguards limit the resulting profiles.
Meta’s statement that users decide how much access Muse receives does not answer how a non-user can challenge the use of their messages or details. The source also says TIME reported that Muse is instructed not to point out that original messages may remain visible after information is deleted; Meta’s help pages say Muse may still remember what was deleted. The precise relationship between a forgotten memory, retained source messages and any derived information is not clear from the material provided.
The source describes WhatsApp’s Advanced Chat Privacy as one way for a non-user to limit what sits in another person’s archive, but does not specify its full effect on Muse or other connected services. Meta has not publicly detailed, in the material cited here, a general opt-out for people who do not use Muse.
Watch for Clearer Privacy Controls
The next developments to watch are whether Meta publishes more detail about connector access, retention and deletion, and whether it offers controls to people who are discussed in a user’s communications but do not have Muse accounts. Users can review connected services and change the settings Meta currently provides; non-users may need to rely on privacy options in the services and conversations they share.
Meta’s expansion into Singapore and its reported work with Nvidia put the agent’s reach and infrastructure in focus, but the source does not give a date for further privacy disclosures or new controls. Until Meta clarifies how reported personal pages are created, updated and removed, the scale of the effect on non-users remains uncertain.
Key Questions
Can Muse read messages from someone who never signed up?
It may access messages available to its user through connected services. Reports say Muse’s instructions call for pages about people named in messages, but the source does not establish that every conversation or every non-user is processed.
Does Muse automatically connect to Instagram?
Meta’s help information says Facebook, Instagram and Threads connect automatically when they share an Accounts Center with Muse. Meta’s chief AI officer said the Instagram connector includes direct messages; the full scope is not documented in the help details cited by the source.
Does opening Muse in WhatsApp expose all other chats?
According to the source, Muse in WhatsApp is a chat a user opens, not a reader of that user’s other WhatsApp conversations. The source does not explain the full effect of every WhatsApp privacy setting on information shared elsewhere.
Does deleting a memory remove everything Muse learned?
Not necessarily. Meta’s help pages say Muse forgets “to the best of its ability” and may still remember information after deletion. The source does not clarify how deletion applies to every derived detail or original message.
What can a non-user do to limit exposure?
The options described are limited and depend on the service. The source points to WhatsApp’s Advanced Chat Privacy as one way to reduce what may sit in another person’s archive, but it does not establish that this removes information already processed by Muse.
Source: ThorstenMeyerAI.com
![GPT-5.6 Sol Ultra produces proof of the Cycle Double Cover Conjecture [pdf]](https://micronomicon.com/wp-content/uploads/2026/07/gpt-5-6-sol-ultra-produces-proof-of-the-cycle-double-cover-conjecture-pdf-featured-560x300.jpg)
