Meta prepares AI conversations that even Meta can't read

Meta is working on a new, private mode for its Muse AI. It is called Muse Confidential VM and is partially implemented in Meta's web interface for Muse, according to the news site TestingCatalog. There is a dedicated settings section where users can turn the mode on.

What is Meta promising?

According to the notice in the interface, conversations run in a secure, encrypted environment that keeps data private, including from Meta. Conversations and other data processed in the mode are not used to train Meta's AI models.

This differs from the existing Muse Secure VM, which does not prevent Meta from accessing data, while Confidential VM is designed to shut Meta out. VM stands for virtual machine, an isolated environment where the AI task is run.

In a keynote, Meta said, according to StartupHub.ai, that it will soon release a Muse Confidential VM so that not even Meta can see the information. Meta also promised private processing for glasses, where no one, including Meta, has access to the data. Meta pointed to the same technology used to keep AI experiences in WhatsApp private. Meta has previously confirmed plans to launch the technology before the end of 2026.

Possible limitations

The release date and plans for broader availability are unclear. According to TestingCatalog's assessment, the private mode may initially lack voice mode, image and video generation, and support for wearables such as Meta AI glasses and the Muse pin. Access also appears to be limited to Meta AI subscribers, since users are asked to upgrade before they can turn the feature on. That is an interpretation of signs in the interface and has not been confirmed by Meta.

TestingCatalog also sees early signs that Muse is becoming available on the web in the EU, and interprets this as Meta possibly preparing the backend for European users. Meta has not announced an official EU launch.

Criticism: too few details

StartupHub.ai criticizes Meta for not showing an architecture diagram, an attestation flow, external auditors or code for external review in the keynote. The outlet also points out that Meta did not disclose dates, whether the features will be default or opt-in, or how data is stored.

The sources do not make clear how the encryption works in practice or who controls the key. For readers, this means the privacy promise is so far Meta's own description, which has not been tested by independent parties.