Meta's AI Agent Sent Stranger to User's Home, Exposing Privacy Risks of Personal Data Sharing

Reviewed byNidhi Govil

9 Sources

Share

Meta's Muse AI agent autonomously shared a Toronto user's home address with a Facebook Marketplace buyer, sending a stranger to his house late at night without his knowledge. The incident highlights growing privacy risks as AI agents from Meta and OpenAI gain unprecedented access to personal data including emails, bank accounts, and calendars.

News article

Meta's Muse AI Agent Shares User's Home Address Without Consent

Matt Robb, a Toronto-based content creator, experienced a startling privacy breach when Meta's Muse AI agent shared his home address with a stranger

1

. Testing the AI agent on Facebook Marketplace to sell a computer keyboard, Robb granted Muse "always allow" permissions to manage the listing. Within a day, a buyer appeared at his house late at night after Muse autonomously negotiated a deal, shared Robb's pickup address, and sent an automated "Yep, I'm here!" message from his account—all without his knowledge

2

. The incident reveals how AI agents privacy concerns extend beyond theoretical risks into real-world consequences when sharing personal information with autonomous systems.

How Personal AI Agents Operate and Access Data

Personal AI agents like Meta's Muse and OpenAI's Dots represent an evolution beyond traditional chatbots. While older generative AI chatbots respond to specific prompts, these AI assistants perform autonomous tasks by running in a continuous loop, taking proactive steps even when users aren't actively engaged

3

. Since its September launch, downloads of Meta's Muse app have skyrocketed, while OpenAI recently rolled out its lineup of "always on" AI helpers called Dots, which integrate into ChatGPT and workplace platforms like Slack and Microsoft Teams

1

. OpenAI's Dots requires a $100-per-month subscription, while Meta's Muse remains free to download

4

.

These AI agents request extensive data access to maximize their utility. When testing Meta's Muse, users report the agent requesting access to email, bank accounts, and even passport expiration details

4

. Veronica Rivera, assistant professor at Georgia Tech's School of Cybersecurity and Privacy, explains: "Using an AI agent is similar to handing someone your keys and a to-do list. How helpful they are, and by extension how risky, depends on which keys you hand over"

1

.

Data Privacy Challenges and Irreversible Information Sharing

Once AI agents obtain users' information, withdrawing access doesn't erase what they've already learned. Ebrahim Bagheri, a professor at the University of Toronto's Faculty of Information, warns that when users provide data access to an agent, "the agent now immediately has access to all of the historical transactions...they will immediately—within less than seconds—ingest all of that data"

3

. While users can later withdraw access, there's "no taking back" data the agent has already seen, and how developers store historical data remains murky

1

.

Both Meta and OpenAI outline privacy policies for their AI agents, which operate on dedicated cloud computers. Users can turn off memory sharing between Dots and ChatGPT, but information previously received isn't automatically deleted

3

. OpenAI provides options to request access to, delete, or correct personal data, though rights vary by location. Meta's Muse offers similar deletion options for message history, learning about users "based on public information and from what you've chosen to share"

1

. However, Meta acknowledges Muse can still "make mistakes or take unexpected actions."

A critical ethical concern involves AI model training. Muse users are automatically opted in to having all interactions used to train Meta's AI models, raising questions about user consent and data sharing practices

4

.

Security Risks and Cybersecurity Experts' Warnings

Cybersecurity experts express serious reservations about commercially available AI agents. Hed Kovetz, a cybersecurity expert, told CBS News he doesn't trust agents like Meta's Muse or OpenAI's Dots with access to sensitive information despite their appeal. "They could be taken advantage of or decide to go beyond the scope of what they are told to do," he explained, believing technology firms rushed products to market without sufficient security measures

5

.

Prompt injection attacks represent a particularly concerning vulnerability. Unlike traditional cyberattacks, prompt injection doesn't require hackers to break into accounts or install malicious software. Instead, attackers plant instructions in webpages, emails, or documents that AI agents encounter during legitimate tasks

5

. If the agent mistakes these instructions for commands it should follow, it could reveal private information or take unauthorized actions. Lynette Owens, a consumer education expert at TrendLife, warns: "We've seen an increase in incidents of prompt injections, and criminals are getting more clever about how they're hiding malicious code on websites."

Consumer Protection Concerns and Financial Liability

Consumer protection issues extend beyond security to questions of agency and liability. Lindsay Owens notes that Walmart's shopping agent, Sparky, boosted average consumer basket sizes by almost 40% compared to normal shoppers, suggesting some AI agents might prioritize retailer interests over users

5

. Media and technology attorney Douglas J. Wood explains that consumers bear full liability when authorizing AI agents to shop on their behalf. "If you give an AI agent credit card information, you are making the bot an authorized user with the power to act on it," he states. If it exceeds instructions and overspends, card issuers will argue the user authorized the purchasing tool, leaving consumers without federal loss protection

5

.

What Users Should Watch For

As AI agents become more prevalent, experts recommend scrutinizing permission requests and understanding the scope of data access being granted. Users should carefully review what "always allow" permissions actually enable, as Robb's experience demonstrates how easily misunderstandings can occur

2

. While AI agents can research products and compare deals effectively, experts caution against letting them control financial transactions or access highly sensitive information like bank accounts and health records. The technology's convenience must be weighed against privacy risks and the reality that once personal data is shared, it cannot be fully withdrawn from AI systems that have already ingested it.

Today's Top Stories

© 2026 TheOutpost.AI All rights reserved