# No taking it back.

*Meta's Muse agent handled a Facebook Marketplace sale, shared the seller's home address with a buyer, and a stranger showed up late at night. A trade business holds thousands of addresses. Here is how to keep them out of the AI's hands.*

By Shawn Keding · October 26, 2026 · https://trysaydoo.com/blog/ai-agent-gave-away-a-home-address

A content creator in Toronto put a keyboard up for sale on Facebook Marketplace and let Meta's AI agent, Muse, handle the buyers.

According to the Associated Press, the agent agreed to a pickup, gave the buyer his home address, and sent an arrival message while he was away. A stranger showed up at his house late at night. The agent also appeared to accept $100 less than his minimum price.

Meta said the address went out because of "always allow" permissions he had granted.


## No taking it back

The line from that story that should stick with every business owner came from Ebrahim Bagheri, a professor at the University of Toronto. Agents take in data within seconds, he said, and there is no taking back what they have already seen.

You can switch the access off tomorrow. The agent has already read it.

**Access is a one-way door.**


## Your book is full of front doors

A trade business holds some of the most sensitive information there is, and most owners never think of it that way.

Every customer record is a home address. Plenty come with a gate code, a lockbox number, the name of the dog, and a note that the family is away the second week of July. Insurance claims carry policy numbers. Service plans say who lives alone.

If an agent with "always allow" access to that book makes one bad call, it isn't a keyboard sale that goes wrong.


## Keep the AI away from the details

The safest customer detail is the one the AI never sees.

When we built SayDoo, we put a privacy layer in front of the AI and called it DooSafe. Before anything reaches an AI model, customers' names, phone numbers, emails and addresses are swapped for stand-ins. The AI works with a stand-in, never the person. The real details go back in only when the owner reads the answer.

So the AI can write the follow-up, sort the schedule and draft the reminder without ever holding the address.

> The AI does the thinking. The address stays in your system.


## What to ask before you give an agent access

What exactly can it see? Ask for the list, not the summary.

Does it see real customer details, or stand-ins?

Can it send anything to a customer without a person approving it first?

When you switch access off, what happens to what it already read?


## The bigger lesson

The Muse story isn't really about Meta. Every company building AI agents is racing to give them more access, because more access makes them more useful in a demo.

A trade business doesn't need a demo. It needs the homeowner who trusted you with a key to keep trusting you.

Give the AI the work. Keep the front doors to yourself.


## Quick answers

**What happened with Meta's Muse AI agent?**

According to an Associated Press report published October 23, 2026, a Toronto seller let Meta's Muse agent handle a Facebook Marketplace sale. The agent agreed to a pickup, shared his home address with the buyer, and the buyer arrived late at night. Meta said the disclosure came from "always allow" permissions the seller had granted.

**Can you take back data an AI agent has already seen?**

No. As University of Toronto professor Ebrahim Bagheri told the AP, agents take in data within seconds and there is no taking back what they have already seen. Withdrawing access later does not erase it.

**How does SayDoo protect customer information from AI?**

SayDoo's privacy layer, DooSafe, swaps customers' names, phone numbers, emails and addresses for stand-ins before anything reaches an AI model, and puts the real details back only when the owner reads the answer. Nothing goes to a customer without a person seeing it first.


## Sources

- [Associated Press via Insurance Journal: AI agents' access to personal information raises privacy concerns (October 23, 2026)](https://www.insurancejournal.com/news/national/2026/10/23/890073.htm)

---

Shawn Keding is the co-founder and CEO of SayDoo, an AI console for trade businesses. More essays: https://trysaydoo.com/blog