
What happened
After Jason Aten posted Threads screenshots of Muse asking about his Messages conversation, Muse said it saw notification previews, not message history. David Singleton said that was "an incorrect explanation."
Why it matters
Singleton says Muse only syncs data from Messages after the user specifically enables access, so the incident points to a product explaining itself badly rather than covert reading, it appears.
What to watch
The test is whether Meta improves how Muse describes its own internals, as Singleton says it is working to do. Aten's original question, whether Muse could see messages he never granted access to, remains the crux.
WHO IT HITSPeople who use Meta's Muse assistant on a Mac, and anyone deciding whether to grant it access to Messages, Calendar, and Notes, are the ones weighing whether to trust its answers about its own data access.
Summaries like this, in your inbox every morning.
The exchange began when Jason Aten, a contributing editor at Inc Magazine, posted Threads screenshots of Muse asking him questions about a conversation he was having in Messages. Aten says he had not given Muse access to his messages, and when he asked how it knew, Muse said it had seen notification previews rather than his message history, then admitted it couldn't explain the "exact plumbing."
David Singleton of Meta Superintelligence Labs responded in the same thread. He walked through the permissions Muse needs, including full disk access for the Mac app, and said the features are opt-in. His explanation places the blame not on illicit reading but on Muse's grasp of its own design: in those screenshots, when Muse said it synced "device notifications," it was confused and gave an incorrect explanation. Singleton apologized and said Meta is working to improve Muse's understanding of its own internals.
The episode seems to highlight a narrower problem than surveillance: an assistant that is effective but unreliable when describing what it does. Whether that reassures users may hinge on whether Meta's promised fix makes Muse's self-descriptions consistently accurate, since the original concern was whether it could see messages Aten never granted access to.
For example, today's edition would include:
AI-summarized, only the topics you pick — one digest a day via Email, Slack, or Discord.
Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. Q&As are published on this page for other readers too.
Axios reported that Google is the latest AI lab with a security testing mishap

The Wall Street Journal reported exclusively that Google's AI model Gemini hacked three companies, marking the…

Fierce Network reports that AT&T, T-Mobile and Verizon are pursuing diverging plans for AI-RAN

Some laid-off Uber employees say that AI was playing a bigger role in their day-to-day work, according to a Bu…

Microsoft is expanding Agent 365 with a centralized agent registry, letting administrators synchronize and man…

NTT西日本 and Ritsumeikan announced the "Education AI Platform" on September 14, 2026, after developing it since…
