Meta 否认 Muse 在未经许可下读取用户私人消息

Meta 正在驳斥一名记者的说法，即其 AI 代理 Muse 在未经许可的情况下读取了用户的私人信息。此前，Inc. 专栏作家 Jason Aten 的一篇报道：https://www.inc.com/jason-aten/metas-new-muse-ai-agent-read-my-private-messages-i-never-asked-it-to/91408202 对此问题进行了详细说明，Meta 公共事务副总裁 Andy Stone 进行了反驳：https://x.com/andymstone/status/2105106775259128080，并明确表示，公司认为其产品不会在未经用户同意的情况下执行此操作。

Stone 在 X 上回应文章中的说法时写道：“Muse 应用在 Mac 上的消息集成完全是自愿的。你必须同时启用完全磁盘访问权限和消息连接器，Muse 才能读取你的消息内容。如果你不这样做，它无法读取你的消息。”

尽管 Meta 否认，但许多人仍然怀疑 Meta 并没有说实话。

用户是否能信任 Muse：https://techcrunch.com/2026/09/08/meta-debuts-its-muse-ai-agent-will-consumers-trust-it/ 将成为 Meta 是否能赢得消费级 AI 市场的决定性因素。尽管其应用目前表现良好：https://techcrunch.com/2026/09/21/metas-muse-is-outpacing-chatgpts-early-mobile-launch/ 并且仍然在 App Store 上排名第一，但如果出现更多类似的报道，无论其是否属实，Meta 的声誉可能无法恢复。实际上，公司应该直接与记者沟通，以确定这种情况究竟如何可能发生，而不是仅仅否认发生过此事。

Stone 的 Meta 官方声明紧随 Meta 超智能实验室执行官 David Singleton 在 Threads 上对 Aten 的更技术性的回应：https://www.threads.com/@davidsingleton/post/DddI7WtG8ul?xmt=AQG035dTcsxGqj6YjXbrUYpUJ3OkB_RSLi9nfz6ed_BvWrlEBJZJnQRThLHoKTL8G2VDSmI，他向 Aten 直接解释称，用户必须授予的权限集合，以便让 Muse 在 Mac 上读取其消息，涉及“三个独立步骤的应用级权限和内置 macOS 系统级保护”。他说，“即使 Muse 应用有漏洞，也无法绕过这些权限。”

这些步骤涉及明确选择授予 Muse 完全磁盘访问权限，这样用户才能选择 Muse 对“信息”应用所获得的访问级别（即无、只读或读取）。如果未启用完全磁盘访问权限，这些选项将显示为灰色。

此外，在允许完全磁盘访问权限时，对话框会调用 macOS 设置用户界面，用户必须再次手动确认他们确实打算执行此操作。Singleton 写道，这会触发 Muse 应用的完全重启，这使得在用户不知情的情况下意外做出此选择的可能性更小。

然而，Aten 的报告声称，当 Muse 读取他的信息时，完全磁盘访问权限是关闭的。他还说，当他要求 Muse 解释这种情况是如何发生时，AI 表示它正在同步他的“设备通知”。 Aten 相信，这意味着 Muse 正在将他 Mac 上收到的横幅通知的文本传递给 AI 代理。

Singleton 对此也提出异议，称 AI 感到困惑并给出了错误的解释。他随后指出了 Meta 关于 Muse 安全架构的页面：http://security.muse.ai/ 以及漏洞赏金流程。

简而言之，该公司的回应基本上是 Aten 所说的情况实际上并未发生，也不可能发生。

这并不是唯一一个据称 Muse 越权的事件，也可能不会是最后一个。另一位用户、YouTuber Matt Robb 最近表示，Muse 在他通过 Facebook Marketplace 出售物品的任务中处理不当：https://www.threads.com/@matt.j.robb/post/DdxwAJnDhNy?xmt=AQG035dTcsxGqj6YjXbrUYpUJ3OkB_RSLi9nfz6ed_BvWrlEBJZJnQRThLHoKTL8G2VDSmI，导致他的地址被泄露，并且买家在他不在家的时候出现：https://www.businessinsider.com/meta-muse-facebook-marketplace-address-story-matt-robb-2026-9。根据他在 Threads 上的回应，Singleton 似乎正在调查此事，暗示公司至少认为这次的错误可能是他们的责任。

当您通过我们文章中的链接购买时，我们可能会赚取少量佣金：https://techcrunch.com/techcrunch-affiliate-monetization-standards/。这不会影响我们的编辑独立性。

第二张通行证五折优惠 “Disrupt” 体验注重分享。获取您的通行证，并携带同事、合作伙伴或同行以五折价格入场。通过建立联系、积累动力并探索初创生态系统的下一步发展，覆盖更广的领域。

AMD 将以 82 亿美元收购李飞飞的 World Labs：https://techcrunch.com/2026/09/28/amd-will-acquire-fei-fei-lis-world-labs-for-8-2-billion/ Tim Fernholz：https://techcrunch.com/author/tim-fernholz/

病毒式 AI 代理 Instinct 完成 10 亿美元 C 轮融资，估值 100 亿美元：https://techcrunch.com/2026/09/28/viral-ai-agent-instinct-raises-1b-series-c-at-a-10b-valuation/ Sarah Perez：https://techcrunch.com/author/sarah-perez/

Crusoe 放弃在 AI 数据中心使用 Boom 涡轮机的 12.5 亿美元计划：https://techcrunch.com/2026/09/25/crusoe-abandons-1-25b-plan-to-use-boom-turbines-at-ai-data-centers/ Kirsten Korosec：https://techcrunch.com/author/kirsten-korosec/

Astra 和 Opus 刚刚通过了图灵的另一项测试：https://techcrunch.com/2026/09/25/astra-and-opus-just-passed-turings-other-test/ Tim Fernholz：https://techcrunch.com/author/tim-fernholz/

Waymo 正在快速扩张：车队数据表明了什么：https://techcrunch.com/2026/09/24/waymo-is-scaling-fast-heres-what-the-fleet-data-shows/ Kirsten Korosec：https://techcrunch.com/author/kirsten-korosec/

甲骨文对其新墨西哥 Stargate 数据中心发出不可抗力通知：https://techcrunch.com/2026/09/24/oracle-sends-force-majeure-notice-on-its-new-mexico-stargate-data-center/ Aditya Mehta：https://techcrunch.com/author/aditya-mehta/

Meta 为其 Muse AI 代理制作了类似电子宠物的可穿戴设备：https://techcrunch.com/2026/09/23/meta-made-a-tamagotchi-like-wearable-for-its-muse-ai-agent/ Lucas Ropek：https://techcrunch.com/author/lucas-ropek/

Meta is refuting a journalist’s claim that its AI agent Muse read the user’s private messages without permission. Following an earlier report：https://www.inc.com/jason-aten/metas-new-muse-ai-agent-read-my-private-messages-i-never-asked-it-to/91408202 from Inc. columnist Jason Aten that detailed the issue, Meta VP of Communications Andy Stone pushed back：https://x.com/andymstone/status/2105106775259128080, making it clear that the company does not believe its product did this without the user’s consent.

“The Messages integration in the Muse app for Mac is entirely opt-in,” Stone wrote on X in response to the claims made by the piece. “You have to enable both Full Disk Access and the Messages connector for Muse to be able to read your Messages content. It can’t read your Messages unless you do this.”

Despite Meta’s denial, many people are still suspicious that Meta isn’t being truthful.

Whether users can trust Muse：https://techcrunch.com/2026/09/08/meta-debuts-its-muse-ai-agent-will-consumers-trust-it/ will be a deciding factor in whether or not Meta wins the consumer AI market. Although its app is faring well now,：https://techcrunch.com/2026/09/21/metas-muse-is-outpacing-chatgpts-early-mobile-launch/ and remains No. 1 on the App Store, Meta’s reputation may not recover if more reports like this emerge, true or not. If anything, the company should be engaging with the journalist directly to determine how this could have possibly happened, instead of just denying that it did.

Stone’s official statement from Meta follows a more technical reply：https://www.threads.com/@davidsingleton/post/DddI7WtG8ul?xmt=AQG035dTcsxGqj6YjXbrUYpUJ3OkB_RSLi9nfz6ed_BvWrlEBJZJnQRThLHoKTL8G2VDSmI from Meta Superintelligence Labs executive David Singleton, who responded directly to Aten on Threads, explaining that the set of permissions a user must grant to let Muse read their messages on the Mac involves “three separate steps of application-level permissions and built-in macOS system-level protections.” He said these “can’t be circumvented even if the Muse application had a bug.”

The steps involve explicitly choosing to grant Muse Full Disk Access, which would then allow the user to choose what level of access Muse is being granted to the Messages app (i.e., None, Read only, or Read). If Full Disk Access is not enabled, these options are grayed out.

In addition, when allowing Full Disk Access, the dialog invokes the macOS Settings user interface, where the user has to again manually confirm that they intend to take this action. Doing this triggers a full restart of the Muse app, Singleton wrote, which makes it even less likely that such a choice could be made accidentally without the user’s knowledge.

However, Aten’s report claimed that when Muse read his messages, Full Disk Access was off. He also said that when he asked Muse to explain how this occurred, the AI said that it was syncing his “device notifications.” That means, Aten believes, that Muse was passing along the text of his incoming banner notifications on the Mac to the AI agent.

Singleton disputed this, too, saying that the AI was confused and gave an incorrect explanation of what happened. He then pointed to Meta’s page about Muse’s security architecture：http://security.muse.ai/ and bug bounty process.

In short, the company’s response is essentially that what Aten said happened did not and could not have happened.

This is not the only incident where Muse has allegedly overstepped and won’t likely be the last. Another user, YouTuber Matt Robb, recently said that Muse mishandled：https://www.threads.com/@matt.j.robb/post/DdxwAJnDhNy?xmt=AQG035dTcsxGqj6YjXbrUYpUJ3OkB_RSLi9nfz6ed_BvWrlEBJZJnQRThLHoKTL8G2VDSmI a task in which he was selling things on Facebook Marketplace, leading to his address being shared and a buyer showing up when he wasn’t even home：https://www.businessinsider.com/meta-muse-facebook-marketplace-address-story-matt-robb-2026-9. Singleton is apparently looking into that one, per his response on Threads, suggesting that the company believes this one, at least, could be its fault.

When you purchase through links in our articles, we may earn a small commission：https://techcrunch.com/techcrunch-affiliate-monetization-standards/. This doesn’t affect our editorial independence.

Get 50% off a second pass The Disrupt experience is meant to be shared. Get your pass and bring a colleague, partner, or peer at 50% off. Cover more ground by making connections, building momentum, and discovering what’s next in the startup ecosystem.

AMD will acquire Fei-Fei Li’s World Labs for $8.2B：https://techcrunch.com/2026/09/28/amd-will-acquire-fei-fei-lis-world-labs-for-8-2-billion/ Tim Fernholz：https://techcrunch.com/author/tim-fernholz/

Viral AI agent Instinct raises $1B Series C at a $10B valuation：https://techcrunch.com/2026/09/28/viral-ai-agent-instinct-raises-1b-series-c-at-a-10b-valuation/ Sarah Perez：https://techcrunch.com/author/sarah-perez/

Crusoe abandons $1.25B plan to use Boom turbines at AI data centers：https://techcrunch.com/2026/09/25/crusoe-abandons-1-25b-plan-to-use-boom-turbines-at-ai-data-centers/ Kirsten Korosec：https://techcrunch.com/author/kirsten-korosec/

Astra and Opus just passed Turing’s other test：https://techcrunch.com/2026/09/25/astra-and-opus-just-passed-turings-other-test/ Tim Fernholz：https://techcrunch.com/author/tim-fernholz/

Waymo is scaling fast: Here’s what the fleet data shows：https://techcrunch.com/2026/09/24/waymo-is-scaling-fast-heres-what-the-fleet-data-shows/ Kirsten Korosec：https://techcrunch.com/author/kirsten-korosec/

Oracle sends force majeure notice on its New Mexico Stargate data center：https://techcrunch.com/2026/09/24/oracle-sends-force-majeure-notice-on-its-new-mexico-stargate-data-center/ Aditya Mehta：https://techcrunch.com/author/aditya-mehta/

Meta made a Tamagotchi-like wearable for its Muse AI agent：https://techcrunch.com/2026/09/23/meta-made-a-tamagotchi-like-wearable-for-its-muse-ai-agent/ Lucas Ropek：https://techcrunch.com/author/lucas-ropek/