OpenAI just released a ChatGPT “Apple Messages” plugin for Macs that lets the AI read, search, summarize, draft and even send iMessages, SMS and RCS texts from Apple’s Messages app. The feature sits inside the ChatGPT desktop app and requires several opt‑ins and macOS permissions, including Full Disk Access. That sounds convenient — and it also sounds like handing a stranger the keys to your most private conversations.
What the ChatGPT Messages plugin actually does
The plugin can access message history on Apple silicon Macs, drive the Messages app using macOS automation tools like AppleScript and Accessibility, and produce summaries or draft replies. OpenAI says the tool “runs locally” and “does not build an index” of your messages, and that the default behavior asks for user approval before sending any text. Administrators of business workspaces can disable the integration. Still, the company has not fully explained whether any message text ever touches OpenAI servers or how long logs or telemetry persist. Those are not small details.
Why this is a problem for Apple’s privacy brand
Apple CEO Tim Cook has long sold Apple as the safe harbors of privacy. Now a third‑party AI that can read and act on Messages sits on Macs. That tension is awkward enough on its own. It gets worse because Apple is already suing OpenAI — accusing the company of stealing trade secrets and naming OpenAI Chief Hardware Officer Tang Tan in the complaint. So while OpenAI CEO Sam Altman and his team roll out integration, Apple’s legal team is in court alleging theft. If you believe reputation matters, this is a credibility test for both companies.
Practical steps: don’t be the test case
If you care about privacy or run a business, treat this like a potential leak. Don’t enable the plugin. Don’t grant Full Disk Access unless you understand exactly what is sent off the device and what records are kept. Enterprise admins should proactively disable the feature until OpenAI publishes a clear, technical diagram of data flow and retention policies. And reporters and regulators should press OpenAI for a straight answer: does any message text travel to the cloud for processing, even temporarily, and what happens to logs and telemetry?
Convenience is nice, but not at the cost of private or corporate data. ChatGPT on Mac might be useful for writing quick replies, but right now the tradeoff is unclear. Apple built a brand on privacy; Apple must defend it. OpenAI claims local operation and opt‑in controls — fine, prove it. Until then, don’t click “allow” and expect Sam Altman’s engineers to guard secrets better than your own common sense.

