ChatGPT Can Now Read Your iMessages and Draft Replies on Mac

OpenAI has introduced a plugin for Apple’s Messages app, giving certain ChatGPT users the ability to search conversations and draft and send replies directly from a Mac. The feature is currently available to ChatGPT Work and Codex users, but its access to personal messages has raised privacy and security questions.

As Bloomberg reported, setting up the plugin requires users to grant ChatGPT several permissions. Users must allow the chatbot to access their on-device Messages history and change their Mac’s privacy settings to provide Full Disk Access. They also need to grant access to contact names and automation tools. These requirements make the feature explicitly opt-in, meaning users are unlikely to activate it accidentally.

OpenAI has emphasized that the plugin is designed with privacy controls in place. According to a company spokesperson cited by Engadget, the plugin does not create an index of users’ text messages. ChatGPT only accesses previous message conversations when a user specifically asks it to use that context.

The system also keeps users in control of outgoing messages. Although ChatGPT can draft a response based on a conversation, it cannot send the message until the user explicitly reviews and approves it.

OpenAI said the plugin is intended to provide transparency and give users control over their Messages data. However, questions remain about how the integration was developed and whether Apple was involved.

Apple has previously restricted third-party services that accessed its messaging platform without its approval. In 2024, for example, Apple repeatedly blocked Beeper Mini’s access to iMessage as the app attempted to restore its integration.

The timing of OpenAI’s Messages integration is also notable given the companies’ recent legal dispute. Apple sued OpenAI in July, alleging that the AI company recruited Apple employees to obtain confidential information and trade secrets. OpenAI has disputed the allegations.

For now, the Messages plugin remains an optional feature that requires users to grant extensive permissions. While OpenAI says users remain in control of their message data and outgoing replies, the level of access required is likely to keep privacy and security concerns at the center of discussions surrounding the new integration.