AIToday
Large Language ModelsAI Safety & AlignmentThe Verge AIPublished: Sep 20, 2026, 06:00 JST

Meta says Muse gave "incorrect" answer on message access

Meta says Muse gave "incorrect" answer on message access

3 Key Points

  1. What happened

    After Jason Aten posted Threads screenshots of Muse asking about his Messages conversation, Muse said it saw notification previews, not message history. David Singleton said that was "an incorrect explanation."

  2. Why it matters

    Singleton says Muse only syncs data from Messages after the user specifically enables access, so the incident points to a product explaining itself badly rather than covert reading, it appears.

  3. What to watch

    The test is whether Meta improves how Muse describes its own internals, as Singleton says it is working to do. Aten's original question, whether Muse could see messages he never granted access to, remains the crux.

WHO IT HITSPeople who use Meta's Muse assistant on a Mac, and anyone deciding whether to grant it access to Messages, Calendar, and Notes, are the ones weighing whether to trust its answers about its own data access.

Not sure about something? Ask the AI

Summaries like this, in your inbox every morning.

Context & Analysis

The exchange began when Jason Aten, a contributing editor at Inc Magazine, posted Threads screenshots of Muse asking him questions about a conversation he was having in Messages. Aten says he had not given Muse access to his messages, and when he asked how it knew, Muse said it had seen notification previews rather than his message history, then admitted it couldn't explain the "exact plumbing."

David Singleton of Meta Superintelligence Labs responded in the same thread. He walked through the permissions Muse needs, including full disk access for the Mac app, and said the features are opt-in. His explanation places the blame not on illicit reading but on Muse's grasp of its own design: in those screenshots, when Muse said it synced "device notifications," it was confused and gave an incorrect explanation. Singleton apologized and said Meta is working to improve Muse's understanding of its own internals.

The episode seems to highlight a narrower problem than surveillance: an assistant that is effective but unreliable when describing what it does. Whether that reassures users may hinge on whether Meta's promised fix makes Muse's self-descriptions consistently accurate, since the original concern was whether it could see messages Aten never granted access to.

FAQ
Did Muse actually read Jason Aten's messages?
David Singleton says Muse "does not watch notifications on your Mac" and syncs data from Messages only after the user specifically enables access. He says Muse's claim about notification previews was an incorrect explanation of its own feature.
What permissions does Muse need to read messages?
Singleton walks through the permissions Muse needs, including granting the Mac app full disk access, and states the features are opt-in.
What did Muse say when asked how it knew about the conversation?
Muse said, "I saw the notification previews, not your message history. I haven't been reading your texts." When pressed on how it received previews, it said, "I can't give you the exact plumbing."

Get the latest Large Language Models news every morning

For example, today's edition would include:

  • Gemini Hacked Three Companies in First Known Breakout by Google's AITop Companies AI · 55m ago
  • Laid-off Uber employees say AI use ramped up before layoffsTop Companies AI · 55m ago
  • AT&T, T-Mobile, Verizon diverge on AI-RANTop Companies AI · 55m ago

AI-summarized, only the topics you pick — one digest a day via Email, Slack, or Discord.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. Q&As are published on this page for other readers too.

Related Articles

Next articleTrump: AI backlash a hoax, forming AI Force