🔍 Read the full analysis: What To Review When Limiting Meta’s AI Agent’s Message Access on ThorstenMeyerAI.com
Get business pricing on office and shipping supplies
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
Meta’s Muse AI agent can access information through connected services, including some messages, depending on the user’s settings and the task. Meta says the account holder controls access, while reporting by WIRED and TIME described files about people mentioned in messages; the scope and retention of those records remain unclear. Users can review connectors, training settings and memory controls, but people who do not use Muse have fewer ways to limit information held in someone else’s account.
Meta’s Muse AI agent can access messages and other data through connected services, making an account holder’s privacy settings relevant to people who never signed up for the tool. A report published October 28 describes which connectors users can review, what Meta says about stored information and the limits of controls available to people whose messages appear in another user’s account.
Muse is a personal AI agent that runs on a computer in the cloud and can perform tasks such as searching email, according to Meta’s product information. Its access depends on connectors that link it to other services. Meta says connecting an email account allows Muse to search it, but does not download the entire inbox unless the user asks. Calendar connectors may send updates proactively.
Meta’s help information says Facebook, Instagram and Threads connect automatically when they are in the same Accounts Center as Muse. Meta chief AI officer Alexandr Wang said the Instagram connector includes direct messages and that Messenger is also supported. The source report says Meta’s public help pages do not fully document what those messaging connectors can read. Access to Mac Messages requires the user to grant macOS Full Disk Access and enable the connector. Meta warns that it does not review custom connectors.
Separate reporting raised questions about how Muse handles information about people named in a user’s conversations. WIRED reported on instructions directing Muse to create a page for each person in the user’s life; TIME later reviewed the instructions and reported that files about the user and other people are refreshed hourly. Meta did not dispute TIME’s findings in the account cited by the source. A Meta spokesperson said: “Each person stays in control of their Muse and decides how much access it gets.” That describes the account holder’s controls, not controls for everyone whose messages may be accessible through that account.
Infographic 01 · What Muse can read
Muse reads what its user can read. That includes you.
Connectors decide what the agent sees. The user switches them on. The people in that user’s chats and inbox are never asked.
Sources a Muse user can open to the agent
The agent reads what its user can read. Everyone who writes to that user is inside.
| Source | How it connects | Status |
|---|---|---|
| Email (Gmail, Outlook) | Opt-in connector. Searches when a task needs it; downloads the whole inbox only if told to. | Meta document |
| Calendar | Opt-in connector. Can push changes to Muse on its own (“proactive”). | Meta document |
| Facebook, Instagram, Threads | Connected automatically if the accounts share an Accounts Center with Muse. | Meta document |
| Instagram DMs, Messenger | Named as Muse-only connectors (“Instagram (incl dm’s) … and Messenger”). What they read is not documented. | executive post |
| Mac Messages (iMessage) | Only with macOS Full Disk Access plus the Messages connector, Meta says. One columnist says it synced anyway. | disputed case |
| A place to chat with Muse, not a connector. Test-build text mentions Muse access to end-to-end encrypted chats. | leaked code | |
| Custom connectors | Muse can build links to other services. Meta does not review them. | Meta document |
What the instructions say
Extracted by researchers; reported by WIRED and TIME reported
- “A page for every person in the user’s life”: family, partners, friends, colleagues, people followed
- Notes on how people met, shared interests, disputes, “tensions and alliances”
- People who never signed up are mapped by other users’ agents
- De-identified “lessons” shared across agents; Meta did not dispute TIME’s findings
What Meta says
Privacy policy, help pages, spokespeople Meta document
- Each user’s VM is isolated; no other user’s agent can reach it
- Conversations and VM data are not shared with Meta’s ad systems
- “Each person stays in control of their Muse and decides how much access it gets”
- Forgetting works “to the best of its ability”; deleted data may still be remembered
Sources: Meta Help Center: Connectors; Muse Privacy Policy; Alexandr Wang on X (8 Sep 2026); TIME (6 Oct 2026); Tom’s Guide on WIRED’s report (6 Oct 2026); TechCrunch (30 Sep 2026); Digit (16 Oct 2026). Status labels: Meta document = stated by Meta; executive post = Meta executive on X, not in help pages; disputed = claim and denial on record; leaked = unreleased code, may never ship.
Powered by Thorsten Meyer AI
Why Other People’s Messages Matter
The key issue is that message access can affect people beyond the account holder. If a Muse user connects a service containing conversations, the agent may process information about people who never installed Muse. The source report says TIME found instructions for maintaining records about people mentioned in chats, messages and emails, including details about relationships and shared history. Those findings come from reporting on Muse’s instructions; they do not establish precisely what is stored for every user or how often such records are created in practice.
For users deciding whether to connect an inbox or social account, the trade-off is broader than convenience. A connector may give Muse information needed to complete a task, while potentially exposing details about other participants in the underlying conversations. Reviewing access before connecting services can reduce what the agent can draw on, but it cannot give non-users the same direct control over another person’s account.
The source report also points to a business relationship around Muse’s expansion: Meta sold $25 billion in stock at $625 a share and $12.5 billion in preferred stock, while Nvidia invested $3 billion. It says Meta plans to deploy Nvidia chips for Muse. Those figures describe financing and a technology relationship; they do not, by themselves, show that the investment changes the product’s privacy settings.
Products Worth Considering
Logitech MX Master 4 for Mac, Ergonomic Bluetooth Mouse with Haptic Feedback, Ultra-Fast Scrolling, USB-C Charging, for MacOS, iPadOS, Windo
Dell XPS 13 9350 Laptop, 13.4 FHD+ Display, Intel Ultra 7 256V, 16GB DDR5, 1TB SSD
Brother TD-2020A 2‑Inch Direct Thermal Desktop Label Printer with USB
As an affiliate, we earn on qualifying purchases.
Muse’s Rollout and Data Connections
Meta launched Muse in the United States on September 8, 2026, according to the source report, and announced Japan as its first market outside North America on October 23. Meta announced Singapore on October 27. TIME reported that Muse had more than five million downloads within weeks; the source does not provide a comparison baseline for that count.
Meta describes a separate Muse Secure VM for each user and says another user’s agent cannot access it. Users can interact with Muse in its app, on a Mac or through a Muse chat in WhatsApp. The source distinguishes that chat from access to other WhatsApp conversations: Muse in WhatsApp is described as a conversation users open, not as a reader of their other chats.
Meta’s privacy policy, as summarized in the source, refers to information about the user and other people, as well as connector data. The report says some connectors can share information proactively, while others are used when a task requires them. The exact behavior may differ by service and setting, so users should check the controls and permissions for each connection rather than assume every connector works the same way.
“They’re trying to know you like a friend, which is honestly pretty creepy.”
— Security researcher Karan Joshi, quoted by WIRED
What Muse Remembers About Others
The precise reach and retention of Muse’s memory remain unclear. The source report says Meta’s help pages describe a “forget” function as working “to the best of its ability” and warn that Muse may still remember information learned from deleted material. The available account does not establish how often deleted information persists, how long it remains, or whether a user can verify that it has been removed.
Meta did not dispute the findings from TIME described in the source, but the article does not include a detailed company response to each reported instruction or explain whether every user’s agent follows the same practices. The scope of Instagram and Messenger access is also not fully documented in the cited help pages. The reported download figure has no stated comparison baseline, and the financing details do not show what effect, if any, Nvidia’s investment has on data handling.
Review Connectors Before Connecting
Muse users can start by reviewing connected apps and removing any they do not want the agent to access. The source report also identifies options to turn off model training, edit the memory file and reset Muse. Users should check Meta’s current settings and help pages for the exact controls available to their accounts, since product options can change.
For people who do not use Muse, the available choices are narrower: they can limit what they share with others, ask contacts to review their connected accounts, or use privacy features that restrict how chats may be shared. The source mentions WhatsApp’s Advanced Chat Privacy as one such measure, but does not describe it as a way to erase information already accessible through another person’s account. Meta’s further explanations of connector access, memory retention and deletion would clarify how users and non-users can limit exposure.
Key Questions
Can Meta Muse read every message in a connected inbox?
Meta says connecting email lets Muse search the account, but it will not download the entire inbox unless the user asks. The source report says access can vary by connector and task; Meta’s public help pages do not fully specify the scope of Instagram and Messenger message access.
Does Muse read all other WhatsApp chats when opened in WhatsApp?
The source report describes Muse in WhatsApp as a chat the user opens, not as a reader of the user’s other WhatsApp conversations. Users should check the current app permissions and product information for any changes.
Can someone who does not use Muse stop their information appearing in it?
They do not have the same direct controls as a Muse account holder. A non-user can limit what they share and ask contacts to review access, but the source does not identify a control that lets them remove information from another person’s Muse account.
Does choosing “forget” delete information Muse has learned?
Not necessarily. The source report says Meta’s help pages describe forgetting as working “to the best of its ability” and warn that Muse may still remember information learned from deleted content. The report does not establish how often that happens or how long information remains.
What settings should Muse users review first?
Review each connected service, disconnect anything unnecessary, check whether model training is enabled, and inspect the memory file and reset options. Pay particular attention to accounts containing private conversations or messages involving other people.
Source: ThorstenMeyerAI.com
