# ChatGPT Can Now Read and Send Your iMessages on Mac — Should You Enable It? > OpenAI launched an Apple Messages plugin for ChatGPT Work and Codex on Mac on August 20, 2026. It can search your texts, draft replies, and send messages on your behalf. Here's what access it requires, what the real privacy tradeoffs are, and whether professionals should turn it on. **Author:** [Alex Lowe](https://theaicareerlab.com/about) — Founder, The AI Career Lab **Published:** 2026-08-21 **Canonical URL:** https://theaicareerlab.com/blog/chatgpt-apple-messages-plugin-mac-2026 **Category:** industry-news **Tags:** ChatGPT, OpenAI, iMessage, data privacy, Mac, ChatGPT Work, AI tools, 2026 ---> **TL;DR.** OpenAI launched an Apple Messages plugin for ChatGPT Work and Codex on Mac on August 20, 2026. It can search your message history, draft replies, and send texts on your behalf — covering iMessage, SMS, and RCS. It's opt-in with per-message approval by default. To enable it you grant Full Disk Access, which is the broadest system permission macOS has. There is a known security issue with persistent approval mode, and OpenAI's data retention on message context is not fully documented. For professional threads involving client or regulated data: keep it off those conversations. --- OpenAI added a new plugin to ChatGPT on Mac this week that some users will find genuinely useful — and others will want to understand carefully before agreeing to. The plugin connects ChatGPT to Apple Messages, giving it the ability to search your texts, summarize conversations, draft replies, and send messages as you. If you've ever wanted to ask an AI assistant "what did my client say about the contract deadline last Tuesday?" and have it actually check your messages, this is the feature that delivers that. But it comes with access requirements and known limitations that professionals should weigh before enabling it. ## What the plugin actually does Once enabled, you can prompt ChatGPT to pull context from a specific Messages thread. It can search across iMessage, SMS, and RCS — meaning it covers conversations with contacts regardless of whether they're on iPhone or Android. The stated use cases from OpenAI include: finding a specific piece of information you remember discussing, checking your calendar for availability mentioned in a thread, spotting possible spam, identifying follow-ups you haven't handled, and drafting replies you then review and send. One thing it does *not* do: automatically read and index all your messages in the background. You have to explicitly ask ChatGPT to access a thread. OpenAI frames this as the privacy-preserving design choice — nothing is scanned until you request it. Sending also requires your approval before anything goes out, under the default settings. OpenAI adds a review step rather than letting ChatGPT fire off a message without you seeing it first. ## What access you're granting To make any of this work, the plugin requires: - **Full Disk Access** in macOS System Settings - **Contact name access** - **Automation tool access** (AppleScript / Accessibility APIs) Full Disk Access is worth understanding clearly. It is the broadest system-level permission macOS offers. It lets an app read files anywhere on your drive — your Documents folder, your Downloads, your application data. OpenAI needs it to read the Messages app's database file. The permission itself is not scoped just to Messages, though. You're granting it to the ChatGPT app, which then has theoretical access to your full file system. For personal Macs used primarily for your own work, this may be an acceptable tradeoff. On a managed corporate device, you likely need IT sign-off before granting this — and many workplace security policies will prohibit it. ## The known security issue OpenAI's own documentation flags a "known issue" where certain types of tasks can disable the per-message approval prompt. That means ChatGPT could, under specific conditions, send a message without pausing for your review. OpenAI has not provided a timeline for fixing this as of August 21, 2026. Until it's resolved, the safest posture is: 1. Leave the default (per-message approval) on 2. Do not enable persistent approval — the setting that removes the review step entirely 3. Treat outbound messages from ChatGPT as something that needs active oversight, not passive trust ## Who this is (and isn't) for **ChatGPT Work or Codex subscriber on an Apple silicon Mac, using it for personal productivity?** The plugin is a reasonable option if your Messages use doesn't involve client data or regulated information, and you understand the Full Disk Access grant. **Using a managed work device, or handling client correspondence, legal documents, healthcare data, or financial information?** The right move is to leave this off for those threads — and to check with IT before enabling it at all. The plugin accesses threads you point it at, but Full Disk Access is a system-level grant, not a per-app-folder one. **On the free, Plus, or Pro ChatGPT plan?** The plugin is not available to you yet. It launched for ChatGPT Work and Codex only. **On an Intel Mac?** Also not supported at launch. Apple silicon Macs only. ## The Apple–OpenAI context worth knowing Apple filed a lawsuit against OpenAI in July 2026 alleging trade secret theft. That dispute is separate from this plugin's functionality — but it's relevant context for two reasons. First, Apple controls the macOS permission model that makes this integration possible, and could tighten or revoke API access at any time. Second, the adversarial relationship between the two companies means any deep-access feature that OpenAI builds on Apple's platform carries more platform risk than usual. If you're counting on this for a workflow, have a fallback. ## What this isn't The Apple Messages plugin is a different feature from ChatGPT Computer History, which OpenAI launched August 14, 2026 and which logs your Mac activity (keystrokes, app switches, clicks) into a searchable timeline. Both require Full Disk Access. Both are opt-in. They are separate plugins with separate purposes — enabling one does not enable the other. If you missed the Computer History announcement, see [ChatGPT Is Now Logging Your Mac Activity](/blog/chatgpt-computer-history-mac-privacy-2026). ## The bottom line ChatGPT can now search your texts and send messages as you, if you're on ChatGPT Work or Codex on an M-series Mac and you grant Full Disk Access. For personal productivity without sensitive data in the mix, the feature does something genuinely useful. For professional use involving client or regulated information, the combination of Full Disk Access, unclear data retention documentation, a known approval-bypass issue, and the Apple–OpenAI litigation makes a cautious approach the right one: keep per-message approval on, and don't point it at threads that carry data your clients or compliance team would care about. --- ## Sources - [ChatGPT can now send texts for you with new Apple Messages plugin — TechCrunch](https://techcrunch.com/2026/08/20/chatgpt-can-now-send-texts-for-you-with-new-apple-messages-plugin/) - [ChatGPT update adds Apple Messages integration on Mac — 9to5Mac](https://9to5mac.com/2026/08/20/chatgpt-update-adds-apple-messages-integration-on-mac/) - [ChatGPT Can Now Read and Send iMessages on Mac — MacRumors](https://www.macrumors.com/2026/08/20/chatgpt-imessages-mac/) - [ChatGPT on Mac can now read and respond to Apple iMessages — Engadget](https://www.engadget.com/2241390/openai-chatgpt-imessage-integration/) - [ChatGPT Is Now Logging Your Mac Activity — AI Career Lab (prior coverage, Computer History)](/blog/chatgpt-computer-history-mac-privacy-2026) ## Frequently asked questions ### What is the ChatGPT Apple Messages plugin? It's an opt-in plugin for ChatGPT on Mac, launched August 20, 2026, that lets ChatGPT read, search, and send messages in Apple's Messages app — covering iMessage, SMS, and RCS. You ask ChatGPT to access a thread; it doesn't automatically index everything. Currently available only to ChatGPT Work and Codex subscribers on Apple silicon Macs. ### Which ChatGPT plans can use the Apple Messages plugin? As of launch, the plugin is available to ChatGPT Work and Codex subscribers only — not the free plan, Plus, or Pro. It also requires an Apple silicon Mac (M-series chip); Intel Macs are not supported. ### What permissions does the plugin require? Full Disk Access in macOS System Settings, access to your contacts, and automation tool access. Full Disk Access is the broadest system permission macOS offers — it lets an app read files across your entire drive, not just the Messages database. OpenAI says ChatGPT uses it to read the Messages storage file, but the permission itself is broader than that single use. ### Can ChatGPT send messages without asking me first? By default, no — ChatGPT requires your approval before sending any message. You can optionally enable persistent approval (so it sends without asking per-message), but OpenAI explicitly discourages this. There is also a known issue where certain task types can disable the approval prompt; OpenAI has not provided a timeline for a fix as of August 21, 2026. ### Does OpenAI store my iMessages on their servers? OpenAI says ChatGPT does not automatically index your Messages and that you must prompt it to read a thread before it does so. They also say the plugin runs on-device. However, TechCrunch notes that the full scope of what gets retained — once ChatGPT has read a thread as context for a conversation — is not completely clear from OpenAI's own documentation. Treat it like any other ChatGPT conversation: content you share in a session may be used per OpenAI's standard data policy unless you're in a Business or Enterprise workspace with data protection enabled. ### Is it safe to use the Apple Messages plugin at work? It depends on your workplace data policies and what kinds of messages you'd have ChatGPT access. If you work with client data, legal correspondence, regulated health or financial information, or anything covered by an NDA, do not use this plugin for those threads. For personal productivity — drafting a casual reply, finding when you last confirmed a meeting — the tradeoffs are lower. Check with your employer's IT or legal team before enabling it on a managed device. ### What's the Apple–OpenAI litigation context? Apple filed a lawsuit against OpenAI in July 2026 alleging trade secret theft. That legal dispute is unrelated to this plugin technically, but it does mean the two companies' relationship is adversarial. Apple could tighten the macOS permissions model that makes this plugin possible — or restrict ChatGPT's access to system APIs — without warning. --- *Canonical version: https://theaicareerlab.com/blog/chatgpt-apple-messages-plugin-mac-2026* *This document is the Markdown companion served for AI crawlers and answer engines. See the canonical URL for the rendered version with navigation, related content, and interactive elements.*