🔍 Read the full analysis: Meta’s AI Agent Message Access: What You Should Review on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Meta announced Muse’s launch in Singapore on October 27, extending its personal AI agent beyond North America. Meta’s documentation says Muse can use connected services and that shared Accounts Center settings can automatically connect Facebook, Instagram and Threads; reports also describe instructions for maintaining profiles of people mentioned in users’ messages. Meta says each user controls Muse’s access, but the scope of some connectors and the effect of deleting remembered information remain unclear.
Meta announced the Singapore launch of Muse on October 27, extending its personal AI agent beyond North America as questions grow about the information it can access. Meta says Muse can use connected services, and its help pages say Facebook, Instagram and Threads may connect automatically when accounts share an Accounts Center; people whose messages are available to a Muse user may also have information about them processed without signing up themselves.
Muse is a cloud-based assistant that Meta says can carry out tasks such as answering email, booking tables and shopping. Meta launched it in the United States on September 8, followed by Japan on October 23 and Singapore on October 27, according to the source report. The report says TIME documented more than 5 million downloads within weeks; that figure is attributed to TIME, not independently established here.
Meta describes access to other services through connectors. Its help pages say connecting email lets Muse search messages but does not download the entire inbox unless the user asks. Calendar connectors can send updates to Muse. Meta says Mac Messages access requires the user to grant macOS Full Disk Access and enable the connector. Its help pages also warn that custom connectors are not reviewed by Meta.
Meta chief AI officer Alexandr Wang said on X that Muse has connectors for Instagram, including direct messages, Threads, Facebook and Messenger. The source report says Meta’s help pages do not fully spell out what the Instagram and Messenger connectors can read. Meta’s privacy policy describes data shared proactively by connectors and lists messages, connector data and “information about you or others” among information it may collect.
Infographic 01 · What Muse can read
Muse reads what its user can read. That includes you.
Connectors decide what the agent sees. The user switches them on. The people in that user’s chats and inbox are never asked.
Sources a Muse user can open to the agent
The agent reads what its user can read. Everyone who writes to that user is inside.
| Source | How it connects | Status |
|---|---|---|
| Email (Gmail, Outlook) | Opt-in connector. Searches when a task needs it; downloads the whole inbox only if told to. | Meta document |
| Calendar | Opt-in connector. Can push changes to Muse on its own (“proactive”). | Meta document |
| Facebook, Instagram, Threads | Connected automatically if the accounts share an Accounts Center with Muse. | Meta document |
| Instagram DMs, Messenger | Named as Muse-only connectors (“Instagram (incl dm’s) … and Messenger”). What they read is not documented. | executive post |
| Mac Messages (iMessage) | Only with macOS Full Disk Access plus the Messages connector, Meta says. One columnist says it synced anyway. | disputed case |
| A place to chat with Muse, not a connector. Test-build text mentions Muse access to end-to-end encrypted chats. | leaked code | |
| Custom connectors | Muse can build links to other services. Meta does not review them. | Meta document |
What the instructions say
Extracted by researchers; reported by WIRED and TIME reported
- “A page for every person in the user’s life”: family, partners, friends, colleagues, people followed
- Notes on how people met, shared interests, disputes, “tensions and alliances”
- People who never signed up are mapped by other users’ agents
- De-identified “lessons” shared across agents; Meta did not dispute TIME’s findings
What Meta says
Privacy policy, help pages, spokespeople Meta document
- Each user’s VM is isolated; no other user’s agent can reach it
- Conversations and VM data are not shared with Meta’s ad systems
- “Each person stays in control of their Muse and decides how much access it gets”
- Forgetting works “to the best of its ability”; deleted data may still be remembered
Sources: Meta Help Center: Connectors; Muse Privacy Policy; Alexandr Wang on X (8 Sep 2026); TIME (6 Oct 2026); Tom’s Guide on WIRED’s report (6 Oct 2026); TechCrunch (30 Sep 2026); Digit (16 Oct 2026). Status labels: Meta document = stated by Meta; executive post = Meta executive on X, not in help pages; disputed = claim and denial on record; leaked = unreleased code, may never ship.
Powered by Thorsten Meyer AI
Messages Can Include Nonusers
The privacy issue reaches beyond the person who installs Muse. If a user connects a service containing messages with other people, those other people may be part of the information an agent can search or summarize, even if they have never used Muse. This is different from saying that Meta has given every Muse agent access to every message: the agent’s access depends on the user’s connections and permissions, and the scope of some integrations is not fully documented.
Reports by WIRED and TIME describe Muse instructions that direct it to maintain a page about people in its user’s life, drawing on chats, messages and emails. TIME reported that those files may be updated hourly and include relationship details and social connections. Meta did not dispute the reported findings in the source material. The reports concern the agent’s instructions; they do not establish that every profile contains accurate information or that every connector supplies the same data.
For people using Muse, the immediate review is practical: check which connectors are active, whether account linking is automatic, what permissions the operating system has granted, and whether model-training settings are on. For people who do not use Muse, control is more limited because their information may sit in another person’s account or archive.
Products Worth Considering
Logitech MX Master 4 for Mac, Ergonomic Bluetooth Mouse with Haptic Feedback, Ultra-Fast Scrolling, USB-C Charging, for MacOS, iPadOS, Windo
Amazon Kindle Paperwhite Signature Edition (12th Generation, 2024), 32 GB, Metallic Black
Jackery Explorer 300 Portable Power Station with 40W Solar Panel
As an affiliate, we earn on qualifying purchases.
How Muse Connections Work
Meta markets Muse as a personal agent that runs on a private virtual machine, which the company calls a Muse Secure VM. Meta says one user’s agent cannot access another user’s agent. Users can interact with Muse in its app, on a Mac or through a Muse chat in WhatsApp. The source report distinguishes that WhatsApp interaction from access to a user’s other WhatsApp chats; it says Muse is a chat the user opens, not a reader of those separate conversations.
Meta’s documented controls include disconnecting connectors, switching off model training, editing the memory file and resetting Muse. The source report says training is on by default and describes Meta’s deletion guidance as qualified: Muse forgets information “to the best of its ability,” and may still remember information learned from material later deleted. That means removing a message or asking Muse to forget something should not be treated as proof that every trace has been erased.
Meta’s launch of Muse has also been accompanied by major financing and infrastructure developments, according to the source report. It says Meta sold $25 billion in stock at $625 a share and $12.5 billion in preferred stock, while Nvidia invested $3 billion and is supplying chips Meta plans to deploy for Muse. The report links the investment to the companies’ expanded work, but the financial figures alone do not establish how Muse handles individual users’ data.
Connector Scope And Deletion
The available material does not specify exactly what information each Instagram and Messenger connector reads, how often every connector sends data, or which messages are available under each permission setting. Meta’s general statements about access do not resolve those product-level questions. The scope of automatic connections may also depend on how a user’s accounts are configured in Accounts Center.
Meta did not dispute the reported instructions for creating profiles of people mentioned in messages, according to the source report, but the material does not establish how widely those instructions operate in practice, how often profiles are generated, or how long derived information is retained. Meta’s stated “best of its ability” language also leaves open what happens to information Muse has inferred after a user deletes the original source or asks the agent to forget it.
The report describes measures for nonusers, including WhatsApp’s Advanced Chat Privacy, as a way to reduce what can be retained in other people’s archives. It does not establish that this blocks all copying, summaries or information already available through other services. Meta’s policies and product behavior may also change as Muse expands.
Review Access Before Connecting
Muse is now available in Singapore, according to Meta’s October 27 announcement. Readers using the service can review connected apps and account permissions in Muse and in the relevant services, disconnect anything they do not want the agent to use, check model-training settings, and inspect or reset its memory. Mac users should also review whether they granted Full Disk Access and enabled Messages access.
People who do not use Muse can ask contacts to avoid sharing or connecting sensitive conversations and review privacy controls in the messaging services they use. Those steps may limit exposure but cannot guarantee removal of information already copied into another user’s account. The next useful developments would be clearer connector-by-connector documentation from Meta, more detail about retention and deletion of derived information, and independent evidence about how reported people profiles work in deployed versions of Muse.
Key Questions
Can Muse read messages from someone who never signed up?
Potentially, if those messages are available through a service connected by a Muse user. The source report says WIRED and TIME described instructions for keeping profiles of people mentioned in chats, messages and emails. That does not mean every nonuser’s messages are accessible to every Muse agent.
Does Muse automatically connect to Instagram?
Meta’s help pages, as described in the source material, say Facebook, Instagram and Threads connect automatically when they share an Accounts Center with Muse. Meta’s chief AI officer said the Instagram connector includes direct messages, but the precise scope is not fully spelled out in the help pages.
Does Muse read every WhatsApp conversation?
The source report says Muse is a chat users open in WhatsApp, not a reader of their other WhatsApp chats. Users should still review the permissions and privacy information Meta provides for the specific version they use.
Does asking Muse to forget something delete it?
Not necessarily. Meta’s guidance says Muse forgets information “to the best of its ability” and may still remember information learned from material that was deleted. The source material does not explain exactly how all derived information is removed.
What can a Muse user review now?
Users can check active connectors, disconnect services, review model-training settings, inspect or reset Muse’s memory, and confirm operating-system permissions such as Mac Full Disk Access. Meta warns that it does not review custom connectors.
Source: ThorstenMeyerAI.com
