# Meta’s Muse Connects Personal Data and Raises Privacy Questions

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/31606
Published: 2026-10-14T07:03:38.000Z
Updated: 2026-10-14T07:03:38.000Z
Section: Technology

> The agent can access email, calendars and financial accounts. A dispute over Mac Messages access remains unresolved.

Meta’s Muse personal AI agent can connect to email, calendars, contacts and financial accounts, raising privacy questions about the scope of its access and the information it collects about people who never use the service.

Muse operates in a dedicated cloud virtual computer. Users select which apps to connect and can disconnect them. Meta says credentials are stored securely and Muse cannot see passwords or payment details. The company has also committed to keeping conversations and virtual-computer data out of its advertising systems.

On Mac, Muse can integrate with Messages, Notes and WhatsApp, and may request Full Disk Access. Users can also connect financial accounts through Plaid, exposing balances, transaction records, investment holdings and mortgage information.

Muse’s instructions include an hourly task to create profiles of people in a user’s life, including relatives, friends, co-workers and people the user follows. The task excludes strangers, public figures and people found only in search results. The people included in these profiles do not need to use Muse. The instructions provide no way for people profiled by the task to refuse.

The agent’s memory notes can be changed when a user asks it to forget information, but chat history must be deleted separately. Some records derived from user data, including memory vectors, are sent outside the personal virtual computer; their contents are unknown.

A dispute over Mac message access remains unresolved. One user said Muse generated a suggestion based on a conversation even though message access was disabled. Meta Superintelligence Labs head David Singleton said the Messages integration requires users to enable both Full Disk Access and the integration. The user maintained that both settings were off. Neither side disputed that Muse’s explanation of how it learned about the conversation was incorrect.

Meta’s position is that an AI agent needs information about users and their contacts to be useful, and that Muse uses public information and content users choose to share. The questions extend beyond users who connect their own accounts to the people whose information may appear in the agent’s profiles.