Meta Launches Muse, an AI Agent That Can Act Across Connected Services

Jon Decker says Meta’s Muse saves him time tracking his syndicated columns

Jon Decker says Meta’s Muse is saving him time by scanning web feeds and alerting him when publications pick up his columns. In an October 24, 2026 opinion column published by the Daily Freeman, he describes a personal use for the task-running assistant Meta launched in September, rather than a new product release.

Decker calls the monitoring time-saving, but gives no measured before-and-after comparison. His account concerns finding his own work online; it is not a test of the bill negotiation, shopping or travel tasks Meta describes for Muse.

Meta introduced Muse on September 8, 2026, with a U.S. rollout on iOS, Android and muse.ai. Its launch announcement also described access through WhatsApp. Most use was free, with subscription plans for people wanting to do more.

Meta says Muse runs on a dedicated virtual machine—a computer hosted in the cloud—with its own browser. The machine holds the agent and user data. People message it with a task or goal, and it develops a plan and works across services they choose to connect.

The company says Muse can fill out forms, negotiate and book travel. It can keep working after the app closes, returning when something changes or approval is needed. Another company-supplied example turns a saved Instagram recipe reel into a grocery list or dinner-party menu, accounting for friends’ dietary restrictions.

For email, a person can choose whether Muse may read messages or also send them, according to Meta. Users can change access or disconnect a service at any time. The company says Muse also shows a complete audit trail of completed and planned actions.

Conversations and data in the virtual machine are not shared with Meta’s advertising systems.

Users can opt out of having interactions used to train Meta’s AI models.

Users can ask Muse to forget specific things it has learned.

A further privacy step was a future commitment at launch. Meta said it would introduce Muse Confidential VM later in 2026, encrypting the whole machine with a key held only by the user. That promise would put the data beyond even Meta’s access; it was not part of the safeguards described as already available.

WIRED Finds Meta’s Muse Trains on Interactions Unless Users Opt Out

Meta’s Muse automatically includes users’ agent interactions in AI-model training unless they opt out, according to a new WIRED review. The finding matters because Muse is built to handle personal online errands by connecting to the accounts and information behind them.

Meta launched Muse in the U.S. on September 8 as a personal AI agent available through iOS, Android, the web and WhatsApp. Meta says it can work in the background on tasks such as browsing, filling out forms, sending email and making purchases, returning when it needs approval for a sensitive action.

WIRED found that users can disable training use in Muse’s Data controls. Meta says data used for training is sanitized to remove identifying information, but WIRED reported that the sanitization process is unclear. The app also keeps a long-term Memory document with interaction details and preferences; users can edit it or request deletion, but cannot currently disable the feature entirely.

Meta says Muse runs in a dedicated cloud virtual machine and stores credentials separately, so the main agent does not see passwords or payment methods. A separate system, Sentinel, governs outgoing network requests and actions through connected services; Meta says sensitive approvals are presented in the app rather than handled as conversational instructions.

Choose which services connect to Muse and, for email, whether it can read messages or send them.

Approve sensitive actions such as sending email or making purchases, and review an audit trail.

Tell Muse to forget specific remembered information and disconnect services when desired.

Meta says conversations and data in Muse’s virtual machine are not shared with its advertising systems, although browsing performed by the agent can indirectly affect ads when websites treat its visits as user activity. Later this year, Meta plans a Confidential VM that it says will encrypt the entire machine with a key held only by the user, preventing Meta from accessing the data inside.

That protection is not available today. For now, Muse users can decide how much account access to grant and can turn off training use, while the product’s always-on memory remains a feature they can manage but not fully disable.

Demo shared by @alexandr_wang

1/ we’ve built a lot of connectors to make it easier to integrate Muse into your life. Muse runs in a secure VM and we don’t use your data for ads or anything other than to make Muse great for you. you can connect Muse to Gmail, Google calendar, Outlook, Plaid, Opentable, Google Docs, Spotify, Function Health, Withings, Tailscale, Peloton, and more.