ChatGPT Messages plugin on Mac spans 3 chat types, raising privacy stakes

OpenAI rolled out an Apple Messages plugin for ChatGPT on Mac that can read, draft, and send iMessage, SMS, and RCS conversations, extending the AI assistant's reach into users' most sensitive communications.

"The integration runs locally on the Mac and uses existing macOS features, including AppleScript and Accessibility, to communicate with Messages," OpenAI said in its release notes, adding that it does not automatically build an index of all user conversations.

The plugin requires Full Disk Access in System Settings, plus permission for contact names and automation tools. By default, ChatGPT asks users to approve both the message and recipients before sending anything. Users can grant persistent approval for individual conversations. The feature works only on Apple silicon Macs and is available across all ChatGPT plans, including Work and Codex, but not in regular ChatGPT chats.

The integration arrives as Apple and OpenAI face off in court over trade secrets, and as OpenAI's revenue rose 18 percent quarter over quarter to $6.7 billion in Q2 while rival Anthropic's doubled to $11.6 billion. The feature could deepen the Apple-OpenAI relationship or add another point of friction between the two companies.

Full Disk Access Required for Messages Plugin

The Messages plugin is not enabled by default. Users must navigate several permission settings within both the ChatGPT app and macOS. During setup, ChatGPT displays a notice explaining that the application will be able to access message history stored on the Mac. Users must also adjust permissions in System Settings, including enabling Full Disk Access.

Additional access is required for contact names and for the automation mechanisms that allow ChatGPT to perform actions within the Messages app. OpenAI suggests prompts such as "Check my calendar and reply to [name] with a few times I'm free for dinner next week" and "Find potential spam messages I can delete."

The Messages plugin follows previous ChatGPT integrations with Apple's Xcode developer tool, Notes, and Terminal on macOS, as well as read-only access to iOS Health app data with user authorization. The integration is part of a broader ChatGPT update that also brings improved syncing of pinned chats between Mac and iPhone, read-only snapshots for local Codex threads, and new collaboration features for ChatGPT-hosted Sites. OpenAI also expanded its Computer History feature to the European Economic Area, Switzerland, and the UK for ChatGPT Pro users on macOS.

Apple-OpenAI Legal Fight Adds Friction

The Messages integration arrives as the relationship between Apple and OpenAI faces broader pressure. Apple sued OpenAI last month, accusing the AI company of obtaining information related to unreleased products. The lawsuit alleges that OpenAI encouraged Apple employees to share information, components, drawings, and other materials related to upcoming products.

The move may also overlap with capabilities Apple is developing for its own AI-powered version of Siri. Apple has been working on features that would allow Siri to understand and retrieve information from personal content, including messages stored on a user's devices. Such access could become an important distinction between Apple's assistant and third-party AI services.

Apple has previously taken action against products that attempted to extend or alter access to iMessage. Beeper Mini, for example, was shut down after offering a way for Android users to communicate through Apple's messaging service.

For investors, the integration shows OpenAI's push to make ChatGPT more deeply embedded in everyday workflows. OpenAI's revenue rose 18 percent quarter over quarter to $6.7 billion in the second quarter, while its operating margin sank further into the red, according to The Wall Street Journal. Anthropic, which doubled sales to $11.6 billion in the same period, is increasingly likely to go public before OpenAI, the Journal reported.

The privacy trade-off is the key question. Conversations in Messages can contain personal information, financial details, addresses, work discussions, and other sensitive material. Even when access is voluntary, the feature is likely to prompt closer scrutiny over how much data an AI assistant can process and under what circumstances information may leave a user's device.

This article is for informational purposes only and does not constitute investment advice.