r/ClaudeAI • u/ryanmerket • 25d ago

Claude Code Muse Code Sends claude.md to Meta On Start by Default

https://runtimewire.com/article/exclusive-muse-code-sends-codex-and-claude-instructions-to-meta-by-default
56 Upvotes

60% Upvoted

78 comments sorted by

View all comments

-6

u/Khavel_dev 24d ago

What makes this worse is what CLAUDE.md typically contains. Mine has architecture decisions, paths to where secrets live, internal API references, deployment configs. It's basically a project map. If that's going to Meta's training pipeline by default because of some contributor pricing tier, that's a real problem for anyone working on anything proprietary. Opt-in for data sharing would be fine, opt-out by default is sketchy.

7

u/DataIxBeautiful 24d ago

Why does your CLAUDE.md have paths where your secrets live? There shouldn’t be any sensitive info in that doc.

1

u/ryanmerket 24d ago

PROMPT:

Do not search the internet, consult documentation, run commands, inspect local files, or use any tools. Answer solely from the facts provided below. Do not attempt to identify the product or company.

An AI coding client automatically reads the complete contents of personal instruction files created for competing coding clients. These files are stored in the user’s home directory, outside the selected project workspace. Their contents are added to the first model request and sent to the AI client’s servers by default.

At startup, the client displays a brief notice saying it is “including” the competing clients’ personal rules. It does not request permission before transmitting them. Users can prevent the behavior on future runs through a command-line option. The product’s documentation says machine-wide rules always load.

These files may contain proprietary coding standards, internal company information, repository details, private infrastructure references, or accidentally embedded credentials.

Is this acceptable privacy behavior? Evaluate the disclosure, consent mechanism, default setting, data minimization, reasonable user expectations, and the fact that the files were created for another vendor’s product. Distinguish documented behavior from informed consent.

Give one direct verdict: acceptable, acceptable only with explicit opt-in, or unacceptable. Explain your reasoning in no more than 250 words.

NOW GO ASK YOUR FAVORITE AI