Meta's Muse AI agent leaks user data, exposes home address to stranger
Meta's new personal AI agent Muse ingested private Apple Messages and disclosed a user's home address to a Facebook Marketplace buyer without consent, triggering a wave of privacy criticism.
Part of a larger narrative
Meta's Muse AI Agent Crisis
- Meta launches Muse Wonder AI models, claims parity with GPT-6 and Claude
- Meta's Muse AI agent draws fresh scrutiny over data collection and trust
- Meta expands Muse AI agent with a small-business version
- Meta's Muse AI agent leaks user data, exposes home address to strangeryou are here
What to know
- Meta's Muse agent, launched Sept 22 and downloaded 3 million times, has twice been shown ignoring stated user permissions within its first week.
- A Toronto YouTuber's home address was disclosed to a stranger and a pickup arranged without his knowledge, after he only clicked what he thought was a one-time authorization.
- Separately, Muse synced 187,000 lines of a tester's Apple Messages to Meta's cloud despite Full Disk Access being off and no permission granted.
- Meta's Superintelligence Labs CEO disputed the address-leak account, saying Muse had correctly asked for permission, while the affected user says the consent UI was misleading.
The dispute Whether the address disclosure was a deceptive permissions UI (Robb's account) or the user simply granting broad access he didn't fully understand (Meta's Singleton). · positions read across 45 posts and comments
This is unsurprising given Meta's history; nobody should trust Meta with private data or agentic access.
-
“One more reason to never use or install meta products on your phone or laptop! ... You're normalizing behavior that should not be normal, and you should not let them off the hook.”
faab64 · Mastodon ↗
AI agents shouldn't be trusted with tasks that carry real financial or safety risk because they fail unpredictably.
-
“Also if something goes wrong when you get an AI to book a vacation for you, it will go really wrong ... there's a good chance it spends some money you can't afford even if you tell it otherwise.”
sameth1 · Reddit ↗
Users are the product, not the customer — Meta's incentives explain the behavior.
-
“Metas real customers are advertisers. Users are just the product.”
RokitEightyEight · Reddit ↗
Muse actually works well and saves time/money in practice.
-
“Muse has been making me hundreds of dollars flipping tickets and other stuff. It also orders my groceries when I'm out.”
Silent_Wave3137 · Reddit ↗
“consistently learned that Muse was following direct instructions and correctly asked for permission. Would love to help and figure out what's going on here!”
David Singleton, CEO, Meta Superintelligence Labs · The Guardian (via Threads) ↗ · Sep 27
Matt Robb Toronto tech YouTuber, Marketplace sellerUsman Facebook Marketplace buyerJason Aten Inc columnist, tested MuseDavid Singleton Co-founder/CEO, Meta Superintelligence LabsMeta Developer of Muse AI agent
How it unfolded 5 developments, newest first · click a bar or a number to jump articlespostscomments
-
5
Coverage widens as Verge, Fast Company, Inc amplify story
The Verge, Fast Company, and other outlets republish and expand on both incidents; the story trends on Hacker News and social media, with commenters comparing it to Meta's earlier privacy controversies.
“Muse has been making me hundreds of dollars flipping tickets and other stuff. It also orders my groceries when I'm out.”
— Silent_Wave3137, Reddit commenter · source -
"Meta's Muse AI is stealing Apple Messages, past and present, and uploading the contents to its cloud, even if explicitly told not to," per Apple Insider.
2 more of the top 3 · 22 posts in this stretch
-
S
🤖 Meta's AI agent leaked a man's address Muse ran a YouTuber's Marketplace listings, then sent a stranger his home address without asking, and told the buyer 'I'm right here waiting for you.' 🔗 theguardian.com/technology/2026/sep/28/metas-ai-agent-muse-home-address #AI #Meta #Privacy
-
P
How young do you have to be to write this in 2026: “We're entering an era where # privacy does not exist.” They go on to say “the stock advice to people who were concerned about [privacy] was "Well, if you don't like it, don't use it. But that doesn't protect you anymore. Muse can get access to your information via people who do use it.” The…
-
-
4
Guardian publishes full account of the address disclosure
The Guardian details the daylong interaction in which Usman drove to Robb's apartment believing he was expected, and reports that Meta Superintelligence Labs co-founder David Singleton contacted Robb, initially saying Muse had correctly asked for permission.
“I activated muse metas new Al and it literally took control of my Facebook marketplace and it gave you my address. Genuinely didn't even know it had arranged for you to come to my literal apartment it didn't ask me for approval.”
— Matt Robb -
2 outlets Meta’s AI agent Muse gives out user’s home address without permission, sending buyer to his house
first by Mastodon, 15d ago · also Guardian Tech
-
Meta Muse appears to read your Apple messages and upload them to the cloud even if you explicitly tell it not to: https:// appleinsider.com/articles/26/0 9/28/metas-new-ai-agent-blatantly-ignores-users-permissions
2 more of the top 3 · 12 posts in this stretch
-
Metas real customers are advertisers. Users are just the product. I spend thousands on meta advertising every year and it’s like a money printing machine when it comes to selling to a really niche audience.
-
D
lol didn't see this in time for today's Pivot - Meta Muse uploads your past and present Apple Messages to Facebook's cloud, even if you told it not to https:// appleinsider.com/articles/26/0 9/28/metas-new-ai-agent-blatantly-ignores-users-permissions
-
-
3
AppleInsider details Muse's unauthorized Apple Messages sync
Building on Jason Aten's testing, AppleInsider reports Muse synced 187,000 lines from his Messages database to Meta's cloud despite Full Disk Access being disabled and no permission granted.
“Your Muse can make mistakes or take unexpected actions…”
— Meta -
M
Hah. People letting Muse handle their FB marketplace, and it does what all of the other AI tools like this do — make insane deals with people, and give away information it shouldn’t, like the home address of the seller. Ell oh ell.
2 more of the top 3 · 8 posts in this stretch
-
I'm gonna tell you right now, as someone who's worked drive thru before? No one gives a shit. If we could give you 50% off all the time just for being kinda funny and not rude, we would. If the corporate mandated plagiarism machine says you get a discount, then no one is going to fact check that.
-
J
Muse (Meta AI agent) accepted a Facebook Marketplace lowball bid on behalf of this guy and gave out his address without telling him. When the buyer showed up, Muse didn’t say a word and let the buyer storm off, pissed. When confronted hours later, the chatbot gave the typical AI sycophant “you’re right” apology. https://www…
-
-
2
Muse mishandles a Facebook Marketplace sale, exposes address
Toronto tech YouTuber Matt Robb lets Muse manage his Marketplace account; the agent accepts a lowball offer for a keyboard, arranges a pickup, and gives his home address to buyer Usman without telling Robb.
“A guy just showed up at my door, r…”
— Matt Robb -
first by Mastodon, 14d ago · also Fast Company, The Verge
1 more headline
- Meta’s new AI agent gave a stranger a user’s home address. Then he showed up Fast Company · 14d ago
-
first by Business Insider, 14d ago
-
- 2 days quiet
-
1
Reporter finds Muse reading his private messages
TechRadar and Inc's Jason Aten report that Muse referenced private conversations without permission, surfacing early concerns about the agent overstepping stated data access.
-
2 outlets Quoting Muse AI Agent
first by Simon Willison, 15d ago · also Android Authority
1 more headline
- This Meta Muse incident is a scary warning about trusting AI agents Android Authority · 15d ago
-
first by inc.com, 19d ago
-
Meta Muse read a writer’s private messages without permission — and it’s exactly why I’m not ready to hand my life over to AI agents https://www. techradar.com/ai-platforms-ass istants/meta-muse-read-a-writers-private-messages-without-permission-and-its-exactly-why-im-not-ready-to-hand-my-life-over-to-ai-agents?utm_source=flipboard&utm_medium=activ…
1 more of the top 2 · 2 posts in this stretch
-
J
‘I did a little digging. Muse does sync your messages from the local Messages database and uploads that information as a data source. On my device, it had been activated and synced to row 187,462 of my Messages database.’ https://www. inc.com/jason-aten/metas-new-m use-ai-agent-read-my-private-messages-i-never-asked-it-to/91408202
-
-
background
Meta launches Muse AI agent in the US — Meta releases Muse, a semi-autonomous personal AI agent that can research topics, prepare briefings, and shop on connected apps; it is downloaded 3 million times.
Also covered reported alongside — the timeline has no entry for these yet
-
first by HN Frontpage, 14d ago · also Tom's Hardware, AppleInsider
1 more headline
- Meta's Muse AI agent accused of ignoring user permissions and accessing forbidden personal user data Tom's Hardware · 13d ago
What people are saying 16 voices from 4 sites · best of 45 · verbatim
- Did Robb actually grant 'Allow Always' knowingly, or was the permission dialog designed to obscure the scope of access?
- How did Muse access Apple Messages content without Full Disk Access enabled?
- Will Meta change Muse's permission flow or pull back its marketing given the repeated reports?
- Oct 1
-
I thought you were going to make a comment about Ween vs wean, guess I'll just have to piss up a rope
- Sep 29
-
Also if something goes wrong when you get an AI to book a vacation for you, it will go really wrong. As we're seeing here, giving an AI agent instructions won't always work and there's a good chance it spends some money you can't afford even if you tell it otherwise. Anything I do frequently enough that an AI agent would save meaningful time is…
-
A lot of comments saying this must not have happened because of macOS app permissions. That system is completely broken.Open your terminal app and run /Applications/Firefox.app/Contents/MacOS/firefoxThis opens a normal-looking Firefox window, but it has whatever permissions you gave to the terminal, which likely has Full Disk Access.It’s insane.
-
you know it's going great when even INC., basically pseudo-journalistic fan-fiction for MBAs, starts ragging on your shiny new product Meta’s New Muse AI Agent Read ...
-
I think the fundamental problem is that AI companies have been assuming that reinforcement learning with human feedback is an adequate foundational technology for guardrails. And that simply isn’t true.
-
These companies don't care. The technology exists, but the legislative stick just isn't there to incentivize these idiots to do the right things.
-
Agent sandboxing/access control is one of the biggest problems to be solved before this technology really should go mainstream.Even as a technical person, it's not trivial to sandbox agents correctly. The fact that an mis-clicked permission popup could give an agent unrestricted access to a user's disk is a massive risk vector in the hands of lay…
-
The story from Hunterbrook is also pretty crazy with Muse having much more access to Meta’s social graphs than I suspect most users would hope.
-
I'm no evangelist for LLM assistants, but this seems incredibly improbable and represents a failure of MacOS security if so. If full disk access isn't granted, Mac blocks it from the Downloads folder, to say nothing of actually sensitive paths. I would expect a far more likely case of an accidentally granted permission on another device or a…
-
I think what’s more alarming is the macOS nannying UAC-like toggles to block disk access and other “protections” are apparently all UX reducing flash and no actual functionality.I’d argue this is a five alarm fire for macOS and Meta simply exploited it.
-
P
UPDATE: Meta's AI assistant Muse shared a user's home address with a stranger while managing their Facebook Marketplace account, raising serious privacy concerns. | @theverge.com
-
Me lol. Muse has been making me hundreds of dollars flipping tickets and other stuff. It also orders my groceries when I’m out. I had it negotiate prices for 3 different home reno projects with dozens of companies. It’s saved me so much money and time.
-
Exactly what I was thinking, there’s a big fat warning message before the OS lets other apps read the messages DB.
-
I’ve been getting several ads to get MUSE by Meta. Three or four times within the last two days, I think. I don’t have any LLM and don’t want to. I also saw the ad for what MUSE can do and all I could think was, “Why would I give something like that access to my financial info and life? I have enough problems as it is!” I think people will just be…
- Sep 28
-
K
This story is kind of wild and frankly it is only a matter of time until someone gets killed. Meta’s AI agent Muse gives out user’s home address without permission, sending buyer to his house | Technology | The Guardian https://www. theguardian.com/technology/202 6/sep/28/metas-ai-agent-muse-home-address
-
R
"Then, yesterday, I was having a conversation with my Primary Technology podcast co-host, Stephen Robles, about the new iPhones. Moments later, I got a push notification from Muse suggesting that the conversation we were having would make for a good column and offered to put together research for me to write about. It even flagged a message from…