Muse Sleep Headband Privacy: What Happens to Your Brainwave Recordings

A sleep headband gives you something to look at the next morning besides the clock. It can turn a restless night into a chart.

But the chart isn’t the only thing worth looking at. If you own a Muse headband, take a minute to see what happens to the recording behind it.

Overview

A Muse session produces more than a score

Muse is a real line of consumer headbands. Its app gives feedback on sleep or meditation using readings from the device, including electroencephalography, or EEG.

EEG measures electrical activity, not thoughts. The privacy question isn’t whether the app knows what you’re thinking. It’s how the company uses the signals you record.

A sleep report is what you see. The underlying signals are a different kind of information, and it’s worth asking what happens to both.

The maker’s policy describes AI training

The Interaxon device privacy policy says sensor information is used for functions including session feedback and improving machine-learning models, including foundation models.

The company says it de-identifies information before using it for those models. It also says it may keep using de-identified or aggregate information after account deletion.

An investigation in Science reported that Interaxon trained a model on approximately 50,000 hours of EEG recordings and updated its disclosures after journalists raised questions.

That history comes from the reporting. The current policy confirms that model training is among the stated purposes, not that any particular person’s data was used.

Decide what you want to change

• Stop adding recordings: Pause new sessions while you check your options. This is a practical step you control immediately.
• Keep your history: Ask for an export or save the reports you need before requesting deletion.
• Limit use of older data: Ask which records the company can locate, what it can delete, and what it may continue using.
• Stop being billed: Check the provider shown on your receipt and cancel the membership separately if necessary.

This is a privacy concern, not evidence that Muse is a fake product or that a hacker stole your recordings.

You don’t have to decide whether all research is worthwhile. Decide whether you’re comfortable with this company’s terms for the data you personally generate.

What the Muse Privacy Policy Does and Does Not Tell You

De-identified doesn’t mean never collected

Removing identifying information changes how a record is handled. It doesn’t mean the underlying recording was never taken or that it can’t be useful to someone.

Think of a recording with the account name removed. It may still show a pattern of activity the company considers valuable for its research or models.

The policy describes how Interaxon treats de-identified information. It doesn’t give you an individual list of sessions selected for a particular training project.

It also doesn’t establish that anyone outside the company knows which recording is yours. Don’t turn a limitation in the policy into a claim of exposure.

If a support reply says your data is anonymous, ask what question that answers. Are they talking about your account, data in a dataset, or both?

Today’s policy doesn’t tell you what your setup screen said

A legal page can describe what the company currently tells customers without showing what each user saw when they first paired the device.

Someone who signed up years ago may reasonably ask when training use was disclosed to their account. That’s a more useful question than assuming everyone saw nothing.

If you remember a particular consent screen, note the approximate date, app version if known, and whether you were setting up a device or entering research.

Save a policy copy with the date you accessed it. That gives you the language you’re asking about if the page changes again.

You don’t need to rely on a shared screenshot of an old policy. Ask the company for the version and notice that applied to your use.

There isn’t just one setting called privacy

Marketing messages, website advertising, research participation, and sensor data can be governed by different controls. Turning off one doesn’t necessarily stop the others.

Muse has a page for privacy choices about sharing. Don’t assume its store controls also cover headset recordings unless the company confirms that scope.

Likewise, deleting the app from your phone is not a request to delete a cloud account. A phone setting only controls what happens on that phone.

If you want no new recordings processed while you investigate, pause use. Ask separately whether a sensor-specific setting can stop training without losing the service.

The most useful reply will name the control, explain what it covers, and say whether it applies to older sessions. Keep that response.

What to Do if You Use a Muse Headband

1. Pause new recordings if the terms are unacceptable to you. You can stop using the device before deciding whether to retain the account.
2. Check the device policy, not only the storefront notice. Open the Privacy Policy section on the Muse legal page and read the sensor-data language.
3. Request the records you want. Ask which EEG recordings, session details, and reports can be supplied, and what formats are available.
4. Ask whether a training opt-out exists. Request an answer for future recordings, older records, de-identified datasets, and any training that’s already happened.
5. Check billing before deleting anything. Save your receipt, cancel through the party that actually billed you, and retain the confirmation.
6. Make a specific deletion request if needed. Ask what can be erased, what remains, for how long, and whether you’ll get written confirmation.
7. Keep the case number. If the reply doesn’t address your request, ask for a privacy contact or seek guidance from your local privacy authority.

Ask for a reply you can use

A request like “please protect my data” leaves too much room for a generic answer. Start with the account email and the records you’re concerned about.

For example, ask whether session recordings linked to that account are still held and whether you can obtain a copy before making a deletion request.

Then ask what de-identification means for your request. If the company says it can’t associate a record with you, ask what that means for removal.

Use the contact details in the device policy or the official Muse contact page. Don’t post the request, account details, or recordings in a public thread.

You may need to verify ownership of the account. Ask what information is needed, and don’t send a device recording just to prove you own it.

Plan the order of export, cancellation, and deletion

Download or request useful history first. A chart you want to discuss later may be hard to retrieve once you lose access.

Look at the original receipt to see who manages the membership. If your app store billed you, start there rather than guessing from the app layout.

Where Muse manages it directly, check the membership settings described in its terms. Keep a copy of the cancellation email and note the effective date.

Then deal with account deletion. Ask whether cancellation changes when you can access past sessions, particularly if your export hasn’t arrived yet.

Even when you do both, the actions have different goals. Cancellation addresses recurring charges. Deletion addresses information retained for the account.

Questions to Ask Before You Buy Any EEG Headband

Can you use the feature without uploading its underlying data?

Start with the feature you actually want. For sleep, you might only want to track when you go to bed and how often you wake up.

If a simpler device or paper log does that job, there’s no need to buy an EEG device just because the graph looks more sophisticated.

If the feature does need a connection, ask whether the raw signal leaves the device or whether it uploads only a summary. Those are different trade-offs.

Don’t assume Bluetooth means data never goes beyond your phone. The connection between phone and headband says little about what the app does afterward.

Will stopping collection change how the device works?

Ask whether the device can still provide its main features if you decline particular uses. Look for an answer about the exact model and app version.

Ask whether a paid membership changes the answer. Paying for a feature doesn’t automatically narrow what information can be used under the policy.

If the answer is unclear, wait before buying. A return period doesn’t undo the creation of recordings during the time you tried the device.

For a gift, give the person a chance to read the policy themselves. Their comfort with a sleep sensor may be different from yours.

Can you get your information back in a usable form?

A request for a copy can mean different things. Ask whether you’ll get a chart, a summary table, or the signal data itself.

Also ask whether the export includes time stamps and device or session identifiers. Those details matter if you’re trying to organize years of records.

Store an export securely. Moving sensitive information into your own folder gives you more control, but it also makes you responsible for that copy.

If you don’t have a use for the raw information, don’t upload it to a free site promising to interpret it. Check that site’s terms first.

What a Deletion Confirmation Should Actually Answer

Account details and session recordings

“Your account is closed” tells you something about access. It doesn’t tell you whether the company still holds a copy of the recordings associated with it.

Ask whether the request covers the account profile, session summaries, raw sensor data, and anything saved in backups. If the answers differ, ask for each separately.

Interaxon says deleted personal information can briefly persist in its database for technical reasons. Ask when deletion takes effect in the systems relevant to your request.

The company also says it may retain some purchase, warranty, and customer-support records. A receipt can stay on file even when a sleep record is gone.

If you need proof of purchase later, save your own copy first. You don’t want to have to reopen a closed account to find an order number.

Research copies and previous training

A record attached to your account, a copy used for research, and a model previously trained on data aren’t the same object. Ask about each by name.

The company may be able to delete account records without identifying which de-identified records once came from your device. Don’t treat those outcomes as interchangeable.

Ask whether a separate research program was involved and whether any data was provided to an outside researcher. The policy permits some sharing of de-identified information.

If it was shared, ask who handles a request about that copy. Your account settings may not control records another organization already received.

A company can’t explain a specific training run merely by saying its policy allows training. Look for a response that describes what it can and cannot establish.

How to handle a reply that leaves gaps

Say the first response confirms only that marketing emails have stopped. Reply with the earlier case number and ask which sensor records your request covered.

If you receive a link to the online store’s cookie settings, explain that you’re asking about EEG recordings made by a paired device, not browsing cookies.

Keep the date of your request and the company’s response. If it says it needs more time, ask when to expect an answer and where it will arrive.

If you contact a privacy authority, describe what you requested, what the company said, and what remains unanswered. Leave out unrelated recordings unless they are necessary.

You don’t have to keep collecting data while this is being resolved. Stopping new sessions and keeping the account temporarily open for an export can coexist.

Frequently Asked Questions

Is the Muse sleep headband a scam?

No evidence cited here establishes that. Muse sells real hardware. The concern is what happens to the brainwave recordings and how clearly that use was disclosed.

Does Muse use brainwave data for AI?

The current Interaxon policy describes using de-identified sensor data to improve machine-learning models. It does not tell you whether your particular session was used.

Does deleting the app erase previous EEG recordings?

No. Removing the app doesn’t itself delete information in an account. Use the account controls or request deletion through the maker’s official privacy contact.

Does closing the account undo AI training?

Don’t assume it does. The company says it may continue using de-identified or aggregate data. Ask what applies to your records and previously trained models.

Do I have to cancel my Muse membership separately?

Verify cancellation with whoever bills you before deleting the account. Keep the confirmation and effective date rather than assuming deletion has stopped the next charge.

Can Muse read my thoughts?

EEG measures patterns of electrical activity. That’s not the same as reading thoughts. The privacy question is what can be done with the recordings and associated data.

The Bottom Line

If you don’t want your EEG recordings used for AI training, pause Muse sessions now. Don’t resume unless the company confirms a control that meets your needs.

Already planning to leave? Save the reports you need, check cancellation separately, then request deletion and ask what information may still be retained.