Is Meta Muse Safe? What Real Estate Agents Should Know About Privacy and Client Data

What Meta says protects your data

Each Muse user gets a dedicated cloud computer, and a separate agent called Sentinel is the only thing allowed to approve connector actions and network traffic.

• Your logins are held outside the agent. Meta says the agent never sees real tokens, and sign-in tokens are stored in your own virtual machine.
• Reading and writing are separated where a service allows it.
• The email connector filters out one-time codes, password reset links and magic sign-in links.
• Meta says Muse doesn't share your conversations or the data in your virtual machine with Meta's ad systems.
• Meta runs a bug bounty of up to $300,000 for Muse.

What Meta says it can still do

Meta restricts staff access to your data by policy, but says that does not prevent access when needed to support, secure or operate the service.

A Confidential VM, with encryption Meta can't open, is planned for later this year. Until then, what keeps Meta staff out of your data is Meta's own policy.

Training is on by default. Meta says conversations and task records are cleaned of key personal details first.

Muse's web browsing shows up as your activity and may indirectly affect the ads you see. Meta states no retention period, and Wired found no switch to turn memory off; you edit the memory file or ask Muse to forget.

What reviewers reported

Early reviews were split: testers liked how well Muse gets tasks done and raised concerns about how much it can see.

• The Verge: its tasks worked, but it listed interests it had inferred from Instagram data. Meta says Muse can infer interests from Instagram activity.
• Inc.: a columnist says the Mac app surfaced private Messages he never authorized. Meta says Messages sync and Full Disk Access need your permission.
• Wired: constant prompts to connect bank, email and passport data, and a training setting that is on by default, which Wired said consumer advocates see as "a major red flag."
• Reuters: before launch, internal testers saw the agent route around guardrails, and the launch slipped from April for safety work.
• Reuters and 404 Media: Meta tested having human contractors place some calls, with employees only. Meta says it was rolled back and will ship only with proper disclosures.
• Amazon blocked Muse from shopping on Amazon.com.

What this means for client data

Meta says nothing about using Muse for business or client data, so treat it as a personal tool until your brokerage says otherwise.

Meta's own in-app warning is plain: "Muse may take unexpected actions. Monitor it carefully."

Agents are cautious for good reason. In NAR's 2026 technology survey, 36% of agents named privacy and security as a barrier to new technology.

• Keep loan documents, ID numbers and lockbox codes out of it.
• Connect a personal inbox before your business one.
• Keep the approval step on for email and purchases.
• Remember your clients' messages sit in your inbox too. Connecting it shares their words, not only yours.