Meta disputes claim that Muse read a user’s private messages without permission
- ID
- 30379
- Status
- summarized
- Published
- 01 Oct 2026, 12:24 AM
- Fetched
- 01 Oct 2026, 1:13 AM
- Provider
- TechCrunch
- Category
- technology
- Original URL
- https://techcrunch.com/2026/09/30/meta-disputes-claim-that-muse-read-a-users-private-messages-without-permission/
- Source URL
- https://techcrunch.com/feed/
Summary
- Score
- 5.5
- Created
- 01 Oct 2026, 1:14 AM
- Tags
- Audience
- ai_agent_usersdevelopersvibe_coderssaas_founders
What happened
Meta is disputing an Inc. column by Jason Aten claiming that its AI agent Muse read a user's private messages without permission. Meta VP of Communications Andy Stone said on X that the Messages integration in the Muse app for Mac is 'entirely opt-in,' requiring users to enable both Full Disk Access and the Messages connector, while Meta Superintelligence Labs executive David Singleton described on Threads a flow of 'three separate steps of application-level permissions' plus macOS system-level protections. The pushback lands days after a New Mexico jury found Meta had misled users about its data practices in a case stemming from the 2018 Cambridge Analytica breach, and while the Muse app sits at No. 1 on the App Store.
Why it matters
If you ship a desktop or Mac agent that touches user data, this is a live case study in the permission design tradeoff: Meta's defense is that three separate opt-in steps plus macOS Full Disk Access make unauthorized reading impossible, which is a defensible technical claim but an unconvincing trust claim for users who remember Cambridge Analytica. Expect users and reviewers to ask your agent 'what exactly can it read, and how many clicks did I give it?' — and expect 'it was opt-in' to be treated as an excuse rather than an answer.
Discussion angle
Is a multi-step opt-in (Full Disk Access + Messages connector + app-level permissions) a real safeguard or just liability cover? Compare how you'd design the same consent flow for a desktop agent that reads messages, and whether Meta should have engaged the journalist directly to reproduce the issue instead of only denying it.