Muse Creates Detailed Profiles of All Your Friends and Family

WIRED’s Lily Hay Newman and Matt Burgess report that independent researcher Karan Joshi extracted Muse system prompts and skill files through the normal chat interface. Among them: instructions to maintain “a page for every person in the user’s life,” refreshed hourly, covering family, partners, friends, colleagues, collaborators, and people you follow.

Those pages can grow sections like Facts, History, The relationship, In common, Open threads, and Strengthening — birthdays, arguments resolved, shared savings goals, “a reason to call.” Meta says the files were meant to be accessible for transparency, and that Muse only uses evidence the user has shared or public information. Millions have already downloaded the agent and connected banks, messages, or health data.

We’re not shocked that a useful agent needs context about the people around you. We’re watching how Meta is productizing that context into a social graph the user never explicitly drew.

Joshi’s read lands: they want to know you like a friend. Meta spokesperson Daniel Roberts frames it as remembering the plumber who sent an invoice or which flowers a spouse liked. Fair as a demo. Creepy as a standing hourly dossier on everyone in your orbit — especially from a company whose core business is relationship inference at scale.

Oxford’s Carissa Véliz puts the asymmetry cleanly: we hand these systems far more than they hand back, and they infer the rest, correctly or not. CDT’s Miranda Bogen notes Muse leans harder into relationships than rival assistants, and that these tools solicit whole-life connectors — email, calendar, finance — rather than teaching people to cull data.

Useful personal AI is real. Remembering a birthday so you don’t forget is a feature. Compiling “Strengthening” suggestions for every colleague and collaborator from bank and message access is a different product: ambient intimacy as infrastructure. Meta’s per-user VM, wipeable memory, confirmation before purchases, and audit logs are the right shape of controls. They don’t fix the incentive to keep asking for more surface area.

I’m watching whether users can see and edit those person-pages as first-class objects — not buried memory — and whether regulators treat relationship dossiers as sensitive personal data even when the “evidence” came from the user’s inbox.

Muse’s architecture gives each user a dedicated virtual machine; Meta says data isn’t shared across agents and users can disconnect services. The dump arrives amid a wider Muse privacy fight over Messages access and full-disk permissions on Mac.