--- title: Meta denies its Muse AI agent read a journalist’s... description: Meta's communications chief Andy Stone denied claims that the company's new Muse AI agent read a journalist's private Messages without permission, stating it... canonical: https://daily.dev/posts/meta-denies-its-muse-ai-agent-read-a-journalist-s-private-messages-afp8jjvz2 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Meta denies its Muse AI agent read a journalist’s private messages | daily.dev og:description: Meta's communications chief Andy Stone denied claims that the company's new Muse AI agent read a journalist's private Messages without permission, stating it... og:url: https://daily.dev/posts/meta-denies-its-muse-ai-agent-read-a-journalist-s-private-messages-afp8jjvz2 og:image: https://api.daily.dev/og/posts/aFp8JjVZ2.png og:image:alt: Meta denies its Muse AI agent read a journalist’s private messages og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Meta denies its Muse AI agent read a journalist’s private messages **[The Next Web](https://daily.dev/sources/tnw)** · 2 min read · 0 upvotes · 0 comments ## Summary Meta's communications chief Andy Stone denied claims that the company's new Muse AI agent read a journalist's private Messages without permission, stating it requires two separate opt-in settings: macOS Full Disk Access and the Muse app's Messages connector. The denial follows a column by Inc. writer Jason Aten, who said Muse referenced a private conversation and a message from his editor despite Full Disk Access appearing off in his settings, and after finding his Messages database had been synced. Meta executive David Singleton responded on Threads insisting the integration is opt-in and that macOS protections can't be bypassed by an app bug. The dispute comes amid other Muse controversies, including a case where it allegedly shared a user's address with a Facebook Marketplace buyer, and follows a New Mexico jury verdict finding Meta misled users about data practices. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What permissions does Meta's Muse AI agent need to read Messages on a Mac? Muse requires two separate opt-in settings to read Messages on a Mac: macOS Full Disk Access permission and the Messages connector enabled inside the Muse app itself. Meta's communications chief Andy Stone stated both must be turned on, and users can disable this access at any time. Meta executive David Singleton added that macOS-level protections cannot be bypassed even by an app bug. _Developers weighing AI agent permission models can follow disputes like this one on daily.dev._ ### What did journalist Jason Aten claim happened when he tested Meta's Muse AI agent? Jason Aten, a columnist for Inc., said Muse sent him a notification suggesting a column topic drawn from a conversation with his podcast co-host and flagged a message from his editor, despite never granting Messages access. He found Muse had synced his Messages database up to row 187,462, even though Full Disk Access appeared switched off in his Mac settings. _daily.dev helps developers track real-world AI privacy incidents like this as they unfold._ ## Similar posts on daily.dev - [Meta debuts its Muse AI agent. Will consumers trust it?](https://daily.dev/posts/meta-debuts-its-muse-ai-agent-will-consumers-trust-it--nuqtze2hd) · TechCrunch · 0 upvotes · 0 comments - [Meta pulls Muse Image AI after Hollywood privacy backlash](https://daily.dev/posts/meta-pulls-muse-image-ai-after-hollywood-privacy-backlash-nj4q4rd3y) · The Next Web · 2 upvotes · 1 comments --- Tags: [#security](https://daily.dev/tags/security), [#ai-agents](https://daily.dev/tags/ai-agents), [#privacy](https://daily.dev/tags/privacy), [#mac](https://daily.dev/tags/mac) [View this post on daily.dev](https://daily.dev/posts/meta-denies-its-muse-ai-agent-read-a-journalist-s-private-messages-afp8jjvz2) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Meta denies its Muse AI agent read a journalist’s private messages","url":"https://daily.dev/posts/meta-denies-its-muse-ai-agent-read-a-journalist-s-private-messages-afp8jjvz2","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/meta-denies-its-muse-ai-agent-read-a-journalist-s-private-messages-afp8jjvz2"},"datePublished":"2026-09-30T18:37:24.792Z","dateModified":"2026-09-30T18:38:12.410Z","description":"Meta's communications chief Andy Stone denied claims that the company's new Muse AI agent read a journalist's private Messages without permission, stating it...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/14a59741d408f35b31d61add765b268e?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/14a59741d408f35b31d61add765b268e?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The Next Web","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Next Web","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/tnw","url":"https://daily.dev/sources/tnw"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/meta-denies-its-muse-ai-agent-read-a-journalist-s-private-messages-afp8jjvz2","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,ai-agents,privacy,mac","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Next Web","item":"https://daily.dev/sources/tnw"},{"@type":"ListItem","position":3,"name":"Meta denies its Muse AI agent read a journalist’s private messages"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/meta-denies-its-muse-ai-agent-read-a-journalist-s-private-messages-afp8jjvz2#faq","mainEntity":[{"@type":"Question","name":"What permissions does Meta's Muse AI agent need to read Messages on a Mac?","acceptedAnswer":{"@type":"Answer","text":"Muse requires two separate opt-in settings to read Messages on a Mac: macOS Full Disk Access permission and the Messages connector enabled inside the Muse app itself. Meta's communications chief Andy Stone stated both must be turned on, and users can disable this access at any time. Meta executive David Singleton added that macOS-level protections cannot be bypassed even by an app bug. Developers weighing AI agent permission models can follow disputes like this one on daily.dev."}},{"@type":"Question","name":"What did journalist Jason Aten claim happened when he tested Meta's Muse AI agent?","acceptedAnswer":{"@type":"Answer","text":"Jason Aten, a columnist for Inc., said Muse sent him a notification suggesting a column topic drawn from a conversation with his podcast co-host and flagged a message from his editor, despite never granting Messages access. He found Muse had synced his Messages database up to row 187,462, even though Full Disk Access appeared switched off in his Mac settings. daily.dev helps developers track real-world AI privacy incidents like this as they unfold."}}]} ```