Instinct, a startup whose AI agent runs errands over text message, has raised $1 billion in a Series C round that values the company at $10 billion, TechCrunch reported on 28 September, about a month after it was valued at $2.5 billion. The round was led by Sequoia Capital, Benchmark and Coatue. Instinct launched in August 2026.
Background
Instinct works through messaging apps such as WhatsApp and iMessage rather than an app of its own; Business Insider’s Pete Syme tried it for two trips this way. A user describes what they want — plan a work trip, book a restaurant, order groceries, cancel a subscription, resolve a bill — and Instinct works through websites and apps the way a human assistant would, including a phone "concierge" feature that can call a business on the user’s behalf, SiliconANGLE reports. In Syme’s test, Instinct did not book anything itself: it returned flight and hotel options and a budget for review, and he still checked and booked the trip himself. "Double-checking is imperative," he wrote.
Findings
To do this, PYMNTS reports, users grant Instinct "broad authority to read and store data copies" from the accounts they connect, and to make purchases and accept agreements on their behalf. The agent can draw on email, messaging, screen, audio and location data, and connects directly to a user’s apps and devices. TechCrunch adds that Instinct’s initial privacy policy "raised concerns about overreach" before the company updated it; TechCrunch does not report what changed, and none of the four sources publish the current policy’s text.
Implications for Mac users
Few readers will have an Instinct account today: TechCrunch describes it as still an invite-only beta, though PYMNTS says it already has a sizeable user base for a product barely two months old. The story matters beyond one company. Instinct illustrates where consumer AI is heading: an agent with standing access to a user’s inbox, calendar, payment methods and accounts, built to act without a click at each step. Meta’s Muse and other assistants are pursuing the same design. Anyone who uses, or is considering, an agent that plans, books or pays on their behalf faces the same questions Instinct raises.
Recommendations
- Before connecting an account, ask what the agent stores and for how long. Reading an inbox once to answer a question differs from keeping a permanent copy of it.
- Ask whether the agent needs standing access, always on whether it is in use or not, or whether it can work one request at a time and lose access afterwards.
- Ask who can see the data once it reaches the company’s servers: staff, other AI models it runs internally, or, under its terms, other companies.
- Ask whether already-collected data can be deleted, and whether closing an account deletes the copies rather than only the login.
- Weigh what would be handed to a human travel agent against what is being handed to software with no one to call if it errs: card numbers, passport details, a family calendar.
- On a Mac, do not rely on a privacy policy alone. Check what the agent’s app actually connects to once installed.
Relevance to FireAI
If an agent like this is installed as a Mac app, FireAI shows the moment it first tries to reach the internet, names the destination, and lets the user decide, through connection prompts. The world map shows which company and country its traffic goes to, per-app rules can scope it to only the destinations it needs, and Investigate covers any single connection after the fact. If the app can use the camera or microphone, that is visible too.
FireAI’s own AI does a narrower, different job. Ask FireAI’s on-device model, about 1.5GB and run on the Mac’s own GPU, explains a connection FireAI has already logged, in plain language, without sending anything to the cloud. It does not plan trips, book anything or act as a general assistant, so it is not a like-for-like comparison to what Instinct does. It is an illustration of a real design choice, though: some AI stays on the device and never needs data to leave it, while an agent such as Instinct has to send data to a remote service because that is where the work happens.
FireAI cannot see inside Instinct’s own servers, cannot report what happens to data once it reaches Instinct’s cloud, and does not replace reading an agent’s privacy policy and permissions before connecting anything. It controls what leaves a Mac and to where; it is not an antivirus and does not scan files or vouch for what a company does with data a user has chosen to hand it.
Limitations
None of the four sources publish Instinct’s current privacy policy or describe what changed from the version TechCrunch says raised overreach concerns. PYMNTS’s figures on user growth are not independently sourced, and none of the reports state how invitations to the beta are currently allocated or how widely the concierge phone-calling feature has shipped.
Try FireAI, by HisnLabs free for 17 days.