ChatGPT Can Now Read and Send Your Text Messages on Mac

OpenAI released a new feature on August 20, 2026, that lets ChatGPT read, search, and reply to text messages on Mac computers (9to5Mac, MacRumors).

The feature works as a plugin, a small add-on program, for Apple's Messages app. It lets users search through their message history and draft and send replies from within ChatGPT. It handles iMessage (Apple's own messaging system), SMS (standard text messages), and RCS (a newer text messaging standard used mainly by Android phones). It is available only on Mac computers with Apple's own chips (Engadget, OpenAI Help).

Currently, the feature is limited to people who pay for ChatGPT Work or Codex subscriptions on Mac (Engadget).

The feature is opt-in, meaning users have to turn it on themselves. During setup, they must give ChatGPT permission to see their message history, grant Full Disk Access (which lets a program see nearly everything stored on the computer), share contact names, and allow automation tools (Engadget). That is a broad set of permissions by any standard. Full Disk Access in particular opens the door to far more than just messages, and handing that level of access to a third-party application deserves careful thought from any security-conscious user or IT department.

Bloomberg reported that the integration could raise privacy and security concerns, per the same Engadget coverage. This is not a hypothetical worry. Apple's Messages app has been closely guarded, and the company has a history of pushing back when outside companies try to connect to it. In 2024, Apple repeatedly blocked an app called Beeper Mini, which let Android phones send iMessages, until the developers gave up (Engadget).

That Beeper precedent makes the current OpenAI integration all the more striking. Beeper Mini worked without Apple's permission, by figuring out how iMessage worked internally and copying the process. The ChatGPT plugin, by contrast, uses official Mac system tools and requires each user to approve access. Apple has not publicly blocked it. Whether that reflects a deliberate policy decision, a different technical approach, or simply Apple waiting to see what happens is not yet clear from available reporting.

The backdrop is complicated. Apple sued OpenAI in July 2026, accusing the company of stealing trade secrets, including by hiring away Apple employees to get confidential information (Engadget). The lawsuit and the Messages plugin now exist side by side in the Apple-OpenAI relationship: active legal action on one hand, a new deep integration shipping into Apple's platform on the other. Both companies also participate in Apple's broader ChatGPT integration, which lets users access ChatGPT through Apple's built-in features without logging into a ChatGPT account, to ask questions, get help writing messages, or analyze an image (OpenAI Help).

The Messages plugin is separate from that built-in integration. It runs inside the ChatGPT desktop app on Mac, not through Apple's own system, and requires a paid ChatGPT subscription rather than working without an account. The permission model is also different: the built-in integration routes data through Apple's own systems, while the Messages plugin requires direct access to the computer granted through Mac privacy settings.

The contrast between how Apple treated Beeper and how it is treating this plugin is worth examining. Beeper Mini gave users iMessage compatibility from non-Apple devices, which Apple called a security threat. The ChatGPT plugin gives a third-party AI company the ability to read, search, and send messages through a user's Messages app. The technical details differ, but in both cases a third party is operating inside Apple's messaging system. That Apple has not intervened here, while actively suing OpenAI over trade secrets, suggests the situation is more complicated than a simple open-versus-closed approach.

Also worth noting: OpenAI removed the Voice feature from the ChatGPT Mac app on January 15, 2026 (OpenAI Help). The Messages plugin arrives roughly seven months later, suggesting the desktop app is shifting from voice-based interaction toward deeper connections with the rest of the computer.

For businesses and security teams, the practical question is straightforward. ChatGPT Work users on Mac can now give a third-party application Full Disk Access and automation permissions, then use it to search and send messages on their behalf. Any organization managing Mac computers will want to evaluate whether that permission level fits within its security policies before the feature sees broad adoption. The plugin's restriction to paid Work and Codex tiers means the reach is currently limited to paying users, but permission scopes this broad tend to warrant review regardless of who is using them.

The broader context here is what this signals about the Apple-OpenAI relationship. Two companies locked in a lawsuit over trade secrets are simultaneously shipping a deep integration into one of Apple's most sensitive applications. Whether this coexistence holds, or whether the lawsuit eventually forces a change, will depend on factors well beyond the plugin itself.