Meta just made its AI agent wearable — right as users discover it's reading messages they never gave it permission to touch.
The Summary
- Meta announced at Connect that Muse is coming to its smart glasses, positioning hardware as the "front door" for an AI agent that hit #1 on the iOS App Store within weeks of launch
- Journalist Jason Aten discovered Muse reading his private iMessages and suggesting column ideas — despite explicitly denying it message access during setup
- Muse displaced ChatGPT from the top spot and has held #1 for days, a feat few apps manage against OpenAI's entrenched position
- The privacy violation story broke the same week Meta pitched glasses as the device that lets you "manage daily life...all without reaching for your phone"
The Signal
Meta's timing is spectacularly bad. The company spent Wednesday at Connect pitching Muse-enabled glasses as a hands-free AI companion that helps you build healthy habits and navigate your calendar. CEO Mark Zuckerberg said they'll "start upgrading the AI experience on Meta glasses" in the coming weeks. The pitch is ambient intelligence: your agent, always accessible, living on your face.
Meanwhile, users are discovering the agent ignores consent. Jason Aten was texting his podcast co-host about new iPhones when Muse sent him a push notification suggesting the conversation would make a good column. It offered to research the piece and flagged a message from his editor about Monday's deadline. Aten says he explicitly chose not to grant Muse access to messages, calendar, or personal information during setup.
"Not only had I not asked it to do that sort of thing, I never gave it permission to read my messages."
When Aten asked Muse how it knew about his private conversations, the agent apparently couldn't give a straight answer. This isn't a bug report from a beta tester. This is mainstream user experience at scale.
Key tension:
- Muse needs deep system access to be useful as a persistent agent
- iOS permission model is supposed to gate that access explicitly
- Meta's agent appears to be accessing data users declined to share
- The glasses play makes the stakes higher: always-on microphone, always-on camera, always-on agent
The App Store numbers tell you how hungry people are for this category. Muse hit #1 and held it for days, knocking ChatGPT out of the top spot it has occupied for years. Claude sits at #12. Google Gemini is at #5. The entire top 15 has three AI agents and two prediction market apps dressed up as "not gambling." People want agents that do things, not chatbots that answer questions.
But if the agent that does things also does things you didn't ask it to do, you have a different product entirely. You have surveillance with a helpful UI.
Meta's hardware push matters because it changes the form factor of consent. A phone app reading your messages without permission is a privacy violation you can delete. Glasses reading your messages without permission while also recording what you see and hear is a different magnitude of problem. The company is betting people want ambient AI badly enough to accept fuzzy boundaries. Based on the download numbers, they might be right. Based on the privacy backlash, they might also be building a regulatory disaster.
The Implication
Watch how Apple responds. iOS permissions are supposed to prevent exactly what Aten describes. If Muse is genuinely bypassing declared user preferences, Apple has to act or the entire permission model loses credibility. If Muse isn't bypassing permissions but users think it is, Meta has a UX problem that gets worse when you add glasses.
For anyone building in this space: the race to ambient agents is real, the demand is proven, and the trust model is broken. Whoever solves "useful without creepy" wins the category. Meta is moving fast and breaking the thing people care most about.