ChatGPT Can Now Read and Send Your iMessages on Mac

Picture a small-agency owner on a Monday morning: forty unread threads, three clients waiting on quotes, one apology overdue. As of this week, that person can open ChatGPT on a Mac and say "find every client I haven't replied to since Thursday and draft the follow-ups." OpenAI's new Apple Messages plugin, announced on August 20, gives the assistant access to iMessage: it can search message history, sort and analyze conversations, draft replies based on what came in, delete messages, and send texts on the user's behalf.

The mechanics, and where your data goes

The plugin requires Full Disk Access on macOS, one of the broadest permissions the operating system can grant, and it is Mac-only for now, since the message archive is processed on the computer rather than the phone. OpenAI's assurances are specific: the plugin runs locally on the device, does not index your full message history, and keeps message content on the machine rather than on OpenAI's servers. Access happens only when you make a concrete request, not in the background.

The most revealing design choice is OpenAI's own warning. The company discourages turning on persistent approval for outgoing messages, because doing so "removes your final chance to review." When the manufacturer tells you not to trust its tool blindly, take the advice.

A convenience and an attack surface, at once

Both readings are correct. For anyone who runs a business out of their message inbox, this is the most tangible version yet of the agent promise: real minutes saved every day, no new app to learn. It is also worth being honest about the other side. A message archive holds negotiations, health appointments, family life; any software with Full Disk Access widens your security surface regardless of what it promises to touch. The move is not a one-off feature either: OpenAI has spent months turning ChatGPT into a platform that acts on the user's behalf, and messaging follows the shared agent-plugin standard push as the logical next territory after email. Expect competitors to answer with similar integrations, and expect WhatsApp-class platforms to be the prize.

Before you switch it on

Three questions are worth answering first. Which machine and which Apple ID will the plugin run on? Do the conversations on that account contain customer data that falls under privacy rules you are accountable for? And who gets to approve outgoing messages, in which situations? On a personal Mac, trying it is a fine way to see where agents stand today. On a work machine, treat the message archive like any other regulated data store: if it is not in your data inventory, the gap is in your process, and no local-processing guarantee closes it for you.

Sources: TechCrunch