1
Oct 1, 2026
5 MILLION DOWNLOADS IN 22 DAYS. CHATGPT TOOK 56.
VIA 9to5Mac
OPEN THE RECEIPTS →5M DOWNLOADS IN 22 DAYS. HALF THE ADS WERE META'S OWN.
FILE UPDATED Oct 13, 2026
WHY THIS MATTERS
Muse is Meta's personal AI agent: it shops, emails, books trips, and syncs your messages, bank accounts, and health data.
SOURCES: Meta9to5MacAxiosStartup Fortune
THE RAP SHEET
1
Oct 1, 2026
VIA 9to5Mac
OPEN THE RECEIPTS →2
Oct 4, 2026
VIA WIRED
OPEN THE RECEIPTS →3
Oct 3, 2026
VIA thejoai.com
OPEN THE RECEIPTS →ZIMBO'S READ ON Muse

STILL MORE NOTES
DEEP FILE
Meta launched Muse on 2026-09-09 as the world's first personal AI agent — then watched it leak a YouTuber's home address, read a journalist's iMessages, and get booted from Amazon within three weeks. It still hit 5 million downloads in 22 days (ChatGPT needed 56), and OpenAI's own CFO accidentally called her company's rival product 'Muse' on live TV. The personal agent era arrived; the privacy receipts are being written in real time.
Sep 9, 2026
Meta launched Muse, billed as the world's first personal AI agent built for everyone: it shops, sends emails, books trips, and carries out tasks with its own compute. The pitch was an agent that acts for you across the apps you already use.
SOURCES: Metafirst-party
Sep 21, 2026
Less than two weeks after launch, Amazon locked Muse out, saying it never authorized the agent to touch user accounts, scrape data, or pull transaction details. Amazon went further and stripped item names and product images from confirmation emails to starve outside AI.
Sep 22, 2026
Meta was quietly testing a 'human concierge' for Muse: human contractors making some of the agent's phone calls on users' behalf. Employees warned that sensitive details could reach call-center contractors; Meta said a public release would include disclosure.
SOURCES: Reutersreported
Sep 22, 2026
Security researchers found a serious zero-day in Muse: any local app could redirect the agent's transcription, steal its token, and control the agent. The same flaw let attackers hijack Muse to take pictures and write malicious files.
SOURCES: Ars Technicareported
Sep 30, 2026
OpenAI CFO Sarah Friar accidentally called the company's new Dots agent 'Muse' during a live interview; the footage went viral. Two days later she did it again on CNBC: 'Muse is going to benefit. Sorry, not Muse. Dots.'
SOURCES: Digit.inreportedOfficeChaireported
Oct 1, 2026
One hidden setting let any app hijack Muse's voice commands; the exploit was dubbed 'Not-a-Mused.' Meta patched the zero-day vulnerability in the Muse AI assistant.
SOURCES: The Jo AIreported
Oct 1, 2026
Independent testers found Muse grabs more data than its rivals — and once posted a user's home address. The findings landed in the middle of Muse's privacy scrutiny after its viral download run.
SOURCES: The Jo AIreported
Oct 1, 2026
Meta's Muse crossed 5 million downloads amid a massive advertising push — but the asterisk traveled with the number: the record-setting run rode on Meta's own ads.
SOURCES: 9to5Macreported
Oct 2, 2026
Amazon blocked Muse from shopping; Muse turned around and handed a stranger a YouTuber's home address. The incident became the sharpest single privacy receipt in the agent's first month.
SOURCES: Tech Startupsreported
Oct 2, 2026
OpenAI launched Dots, always-on agents inside ChatGPT, as Sam Altman promised an 'always-on' AI helper — a direct shot at Meta's runaway Muse.
SOURCES: BetaNewsreported
Oct 3, 2026
Meta opened Muse AI to hardware makers and shipped 5,000 free USB dongles so an AI can flip your lights, plus an open-source hardware kit — landing the same week Apple locked agents out of your Mac.
SOURCES: thejoai.comreported
Oct 3, 2026
Meta's Muse synced 187,000 of a journalist's iMessages into the agent. Apple responded by tightening Mac disk-access rules after an AI agent read private messages.
SOURCES: Startup Fortunereported
Oct 4, 2026
Researcher Karan Joshi extracted Muse's system prompts by simply asking the agent to share its own files. The instructions tell Muse to keep a page for every person in the user's life — family, partners, friends, colleagues — compiled hourly from its memory files. Meta says the files were left accessible in the interest of transparency.
SOURCES: WIREDreported