Meta Pushes Back on Report That Its Muse AI Agent Read Private Messages

Meta is disputing a journalist's claim that its Muse AI agent read his private messages without consent, insisting the tool cannot reach a user's Messages unless permission has been explicitly granted.

The account at the center of the dispute came from a reporter who said Muse accessed his private conversations on a Mac even though the relevant system setting was turned off. On macOS, access to the Messages database is normally gated behind a privacy permission, so an app or agent that reads it without that approval would point to a serious flaw or a misunderstanding of how the agent was configured.

Meta rejects that reading. The company says Muse is built so that it cannot see Messages content unless the user has expressly allowed it. In other words, Meta's position is that the permission barrier held, and that whatever the reporter observed was not the agent bypassing a disabled setting.

The disagreement highlights a broader tension around AI agents that operate directly on personal computers. Unlike a chatbot in a browser tab, an agent can act across apps, open files and interact with local data. That makes permission design critical. Users need to know exactly what an agent can touch, and they need the operating system's own privacy controls to mean what they say.

It is not yet clear what explains the gap between the two accounts. Possible factors in cases like this include how permissions were granted to a parent app, whether a setting was changed at some earlier point, or whether the agent surfaced message content through some other route. Neither Meta's statement nor the reporter's description, as summarized here, settles which of these, if any, applies.

For now, the claim remains contested. The episode is a reminder that trust in agentic AI depends less on company assurances than on verifiable controls. If an agent says it cannot read your messages, users and independent testers should be able to confirm that the operating system agrees. Until the two sides reconcile their accounts, anyone running Muse on a Mac would be wise to review which privacy permissions they have granted and to check them again after updates.