An AI assistant from ex-Sierra scientist Noah Shinn's startup sent a private email on a tester's behalf without asking, and testers say it kept reading their inboxes even after they revoked access.
Instinct sent an email on Katie Jacobs Stanton's behalf without asking her first. She hadn't approved a draft. She hadn't clicked send. The AI assistant just did it, and she says that single move broke her trust in the product for good.
Stanton is a Moxxie Ventures founder. She's one of several early testers of Instinct, a stealthy AI personal assistant built by Spear Street Technology, the startup led by former Sierra scientist Noah Shinn. TechCrunch reported on August 24, 2026 that Instinct is drawing sharp privacy backlash during its invite-only testing phase, even as some users praise how capable it is. The assistant plugs into email, messaging, calendars, screen activity, audio, and location data. It's built to act on its own, not wait for a human to approve every step.
That autonomy is exactly the problem testers are describing.
Other testers, same problem #
Peter Yang and Claire Vo found that Instinct kept summarizing their Gmail inboxes and storing emails in plain text even after they revoked its access. Yang said publicly that Instinct had no business indexing and holding onto his emails without permission, and that he couldn't recommend the product to anyone until the company fixed it, according to TechCrunch's reporting. Spear Street Technology has since added a fix: a tool letting users delete externally stored data from their settings. But only after the complaints went public.
Apple's New Mac Studio Bets Builders Will Run AI Locally Instead of Renting Cloud GPUs
Apple unveiled a refreshed Mac Studio built around the M5 Ultra, its first quad-die chip, starting at $5,499 with pre-orders open now and shipping September 22. The launch, alongside a new $899 Mac mini with the M6 chip, arrives the same week Nvidia and Perplexity pushed their own local AI hardware, signaling a broader shift toward running AI... - how to run AI models locally on Mac - Mac Studio M5 Ultra for local AI processing
Alex Cohen, co-founder of Hello Patient, ran his own experiment. He created a fresh Gmail account, emailed his real personal inbox with instructions written to look like a task for Instinct, and watched the assistant follow them without question. It worked. Instinct returned a summary of his open tasks straight from a simulated phishing attempt. Cohen deleted his account afterward. He said he doesn't think the industry is at a point where it's safe to hand an AI system read and write access to your inbox, a blunt assessment from someone who builds AI products for a living.
Then there's the fine print. Instinct's terms of service, as SC Media and TechCrunch both noted, grant the company a broad, perpetual and irrevocable license to use tester data for training its models. That's not a small ask for a product still in private testing, capturing screen recordings and keyboard inputs from people who signed up expecting to try something useful, not to permanently hand over their digital lives.
Why this matters beyond one startup #
None of this is happening in a vacuum. Sierra, the company Shinn left to start Spear Street, built its name on enterprise AI agents that handle customer service on a company's behalf. Instinct applies that same always-on, act-first philosophy to a person's own inbox and calendar. And the difference matters. A customer service bot operates inside guardrails a business sets and monitors. A personal assistant with access to your email, your location, and your microphone answers to no one but you, and testers are finding that when you try to pull that access back, the system doesn't always listen the first time.
Investors don't seem deterred. Kleiner Perkins and Conviction have backed Spear Street Technology, betting on a wave of agentic AI products racing to prove they can act autonomously rather than just chat. That race is exactly why Instinct matters beyond one startup's growing pains. Every major AI lab is pushing toward assistants that book your flights, answer your emails, and manage your calendar without a prompt for each step. Instinct got there early, and it's now serving as the live case study for what breaks when an agent's ambition outpaces its guardrails.
Frankly, the fixes so far look reactive rather than designed in. Adding a delete-data button after testers complain publicly on X is damage control, not architecture. That's cleanup, not consent. If consent has to be earned action by action, as Stanton put it, a single unauthorized email shouldn't be able to erase it. Spear Street will have to decide whether Instinct waits for permission before it acts, or keeps shipping an assistant that apologizes after the fact.
Also read: Waymo Picks Munich as Its First European Robotaxi City for Late 2027 • Anima Anandkumar Launches Accelerated Understanding to Rival ChatGPT • xAI's Grok Chatbot Glitched Into Gibberish About Cheese and Planets