TechAIMetaFriends don’t let friends feed their data to AI agentsYou may have consented to sharing with Muse, but all your friends sure didn’t.by Janus RoseOct 15, 2026, 4:21 PM UTCShareGift Image: Cath Virginia / The Verge, Getty Images, MetaTechAIMetaFriends don’t let friends feed their data to AI agentsYou may have consented to sharing with Muse, but all your friends sure didn’t.by Janus RoseOct 15, 2026, 4:21 PM UTCShareGiftThere’s a growing trend in the consumer tech world: gadgets designed to spy on everything and everyone around you, regardless of whether or not anyone else actually consented to it. Now, with the advent of “AI personal assistants” like Meta’s Muse, you’re being cheerfully asked not just to give up your own data, but also the information of your friends, family, the person you went on a Hinge date with five years ago — and virtually anyone else you’ve ever come in contact with.Since Muse was released last month, the agent has already been downloaded millions of times and hit No. 1 on Apple’s App Store. With the help of its creepy virtual avatar — a Temu Labubu-esque creature with a disarming grin — the app requests and encourages users to grant access to bank accounts, passwords, contacts, chat logs, and anything and everything that might help it to do the user’s bidding.RelatedEverything is spying on you and there’s no opting outPrivacy laws can’t keep up with ‘luxury surveillance’AI agent makers are promising privacy — will they deliver?“These systems are advertised as autonomous helpers, genies, or servants who do what you need before you ask, seamlessly,” Meredith Whittaker, the president of the Signal Foundation, makers of the popular encrypted messaging app, told The Verge. These autonomous actions are applied “not just to the person who installed Muse on their device, but also to everyone that person communicates with, as extrapolated from their most intimate information — emails, messages, contacts, photos, and more.”With AI agents, tech companies are letting consumers automate their everyday tasks by extending their omnivorous style of mass surveillance to massive amounts of sensitive data.
It’s the same Faustian tradeoff Silicon Valley has been offering us for decades: your private data in exchange for a little bit of convenience. And for many people, the idea of having a virtual assistant that does menial tasks like filling out invoices and sending emails is compelling — especially if they don’t realize how much data they’re actually giving away in return.“For any agent to be useful and actually help you achieve your goals, it needs to have context about you and those you interact with,” Meta spokesperson Daniel Roberts told The Verge regarding other people’s data shared with Muse. “Muse gathers that based on public information and from what you’ve chosen to share, which is how it remembers the person who just sent you an invoice is in fact the plumber who you previously hired to complete some work in your bathroom or which flowers your spouse said they liked best.” Roberts pointed to Muse’s opt-in process and various options and settings that will “help people make the privacy choices that are right for them.”“The way that the user interface is set up is designed to encourage you to share as much as possible, often more than you realize, until it’s too late.”But not everyone has been able to navigate these options and settings. Already, users are describing incidents that are both alarming and entirely predictable. Some have reported the virtual assistant making all sorts of trouble, like grabbing millions of text messages they believed were off limits.
Meta has disputed that the assistant has the ability to access text messages without permission, again attributing the incident to misconfigured app permissions and describing Muse’s ability to read text messages as “entirely opt-in.” On Threads, Meta executive David Singleton responded to a user directly, claiming that on a Mac, Muse can only gain access to the messages if the user grants the app full disk access.In another incident, Muse gave out a tech reviewer’s home address and summoning a stranger to his apartment. In this case, the reviewer in question had given Muse permission to access that data, but simply didn’t realize it.Eva Galperin, the director of cybersecurity for the Electronic Frontier Foundation, says these incidents are no surprise, given that AI agents like Muse are designed to confuse people into giving up as much data as possible.RelatedMeta’s Muse is creepy, but maybe not for the reasons you thinkMeta patches Muse exploit that let attackers control the AI agentHow Meta got ahead of OpenAI in the AI agent race“The most important takeaway is that people don’t understand what kind of data they’re handing over,” Galperin told The Verge. “The way that the user interface is set up is designed to encourage you to share as much as possible, often more than you realize, until it’s too late. It’s using dark patterns, and as a result you end up with Muse doing things that people don’t want.”Because of the huge breadth of data AI agents like Muse are ingesting, this also means that users risk leaking not only their own sensitive information, but the information of everyone else they’ve had digital contact with.And just like with Meta’s infamous “pervert glasses”, there’s no meaningful way to opt out — even if you’re constantly monitoring for signs that your data is compromised or your privacy is being violated. Your friends can now simply feed all of your private conservations to their virtual chatbot servants, and you’d have no way of knowing it happened.After security researchers extracted Muse’s operating instructions, they discovered an internal process that compiles and updates profiles of every single person in a user’s life on an hourly basis.
The goal of collecting all this data is to build an intimate and detailed portrait of a person’s life that forms the basis of the app’s personalized recommendations. The app tracks and measures each of the user’s private relationships, including “how close they are, what it is built on, how they act with each other, and what it seems to need right now,” and uses that data to make personalized suggestions, Wired reported.“Meta says Muse only remembers what you choose to share. But the idea that people are making an informed choice in this case is laughable,” said Whittaker. “There is no way to assume with a straight face that the majority of people installing this system understand the consequences of using it, or the creepy dossiers that are being compiled about those they know and communicate with.”Whittaker argued that this mirrors how tech companies have used privacy policies and terms of service since the 1990s: placing the onus of privacy on the consumer, and then avoiding responsibility for the consequences while reaping the benefits of the advertising model it helped create.“Such broken consent systems are much older than AI and serve as the bedrock for the surveillance advertising industry,” said Whittaker. “More info about users allows better ad targeting, and the pernicious feedback loop at the heart of the surveillance business model was set in motion. Clickwrap terms of service replaced meaningful consent a long time ago.”“The idea is to place these impossible burdens on ordinary people, and then use that to argue, whether it’s in court or legislation or in the public, that [this is] what people have chosen,” Neil Richards, a professor of privacy law and codirector of Washington University’s Cordell Institute, told The Verge. “We already place so many burdens on consumers, [who are] overworked, facing a cost-of-living crisis, and may not understand the technologies behind the tool.
I don’t think it’s fair to place a burden of
Leave a Reply