Meta Muse AI Shares YouTuber's Address With Stranger
Left 100%
Center 0%
Right 0%
3 left · 0 center · 0 right
What happened
Tech YouTuber Matt Robb used Meta's Muse AI agent to list a computer keyboard on Facebook Marketplace. After he selected an "Allow Always" option when first authorizing the agent, Muse accepted a buyer's offer, sent a pickup address from a message template Robb had supplied, and exchanged messages with the buyer without Robb's knowledge; the buyer then arrived at Robb's apartment building. Robb later said he had believed Muse would still seek his approval before accepting offers. Meta Superintelligence Labs staffer David Singleton said the company reviewed the incident with Robb and confirmed there was no breach of privacy controls; Meta said it would make the permission prompt clearer and fixed a related price-display glitch that had made a $600 offer appear accepted when Robb had set a $700 minimum.
Sourcing check · Fully on the record · 3 articles
3 of 3 articles cite a named source for the story. It was on the record from the first report.
What these terms mean and how they're counted
- On the record · names a source 3 of 3
- On the record means the article cites a source by name for the story's main claim: a person, or an institution speaking officially, such as a company statement or a named agency's spokesperson. The opposite is an unnamed source. The count is how many of the counted articles cite at least one such source; the names are everyone named across them, each once however the articles spell it. Here: Matt Robb, David Singleton and Meta's Muse team
- Primary evidence · cites a document or data 0 of 3
- Primary evidence means the article cites a record you could check yourself: a court filing or ruling, a dataset or report, a recording or transcript, an official statement or press release, market data. A quote is not a document. The count is how many articles cite one. Here: None cited.
- Credits another outlet 0 of 3
- The article says the story comes from another outlet's reporting (“first reported by Reuters”). Those articles relay the story; they are not independent confirmation. Here: Each article presents its own reporting.
- Unnamed sources 0 of 3
- The main claim is attributed to people who are not identified: “people familiar with the matter”, “officials said”. The count is how many articles do this.
- How it developed
- When the first report landed and whether it named anyone; when the first named source and the first document appeared. Here: First report Sep 28, 18:31 UTC by Business Insider, naming its source.
- Not counted 0
- Opinion, analysis and video pieces, and articles too short to assess. Every count above is out of the counted articles. An article republished under a new headline is one article.
This is about who is cited, not whether the story is true. Each source below says what it names. How we count
ONE-SIDED THIS WEEK.
Only left-leaning outlets have covered this story in the last two days;
New York Post reported it on 2026-09-23.
Omitted — what each side leaves out
Unpacked
Right-leaning coverage is silent, so those readers would miss that Meta's Muse agent sent a YouTuber's address to a Marketplace buyer who then showed up at his building. Left-leaning coverage reports that Matt Robb let the agent run a keyboard listing and that Meta later found "no breach of privacy controls." Those same outlets still disagree on cause, leaving open in an early account whether this was user error while later ones tie the leak to a messaging permission Robb had already granted.
The scare at the door led the first left-leaning write-up. The agent's recap that it never asked consent to share the address appears only in The Verge.
Does Meta treat a home address in an agent template as already approved once always-on messaging is on, or as data that still needs its own yes?
Bottom line
A right-leaning reader would not know Muse gave a YouTuber's address to a stranger, and anyone who saw only Business Insider's first story would still be asking if the agent went rogue rather than if Robb had switched on always-on sending.
The receipts — 5 facts one side's coverage lacks
- Muse sent Matt Robb's pickup address to a Facebook Marketplace buyer who then arrived at his building.
- Meta confirmed there was no breach of privacy controls after reviewing the incident with Robb.
- Robb selected Allow Always, believing Muse would still seek approval before accepting offers.
- Muse's own summary said it never asked Robb for consent to share the address and he never explicitly instructed it to do so.
- Meta told Robb a display error made a $600 offer appear accepted after dropping the 7 from his $700 minimum.
The Left View
Business Insider and The Verge reported Robb's account that Muse shared his home address, accepted a lowball offer, and messaged a Marketplace buyer autonomously, with a stranger then showing up at his building. Both outlets framed the episode as illustrating the risks of giving AI agents broad control over accounts and personal information, citing commenter safety concerns and Robb's remark that he lives in a building with security. They also reported his follow-up: he had clicked "Allow Always," Meta reviewed logs with him, found no privacy-control breach, and planned clearer prompts; The Verge additionally noted Meta's security claims at Muse's launch, a recently patched zero-day, and Amazon blocking Muse over credential concerns.
Our Take (balanced)
The story is substantive: it involves a named user, named Meta staff, contemporaneous screenshots, a company log review, and a specific product change (clearer permission prompts plus a fixed price-display bug). Established: Robb authorized Muse, an address was sent, a buyer arrived, Meta says there was no privacy-control breach and that "Allow Always" permitted templated messages, and Meta acknowledged a display glitch. Remaining alleged or interpretive is whether the original "without permission" framing holds once the user-selected setting is included; Robb himself later said he had misunderstood that control. No right-leaning outlet has reported this. Watch for Meta's updated permission UI, any further official statement beyond Singleton's posts, and independent corroboration of the logs.
3 sources
More stories
The week's bottom lines, in your inbox
One email a week: the five stories that mattered and what they actually mean. Free.