OpenAI has released a ChatGPT Apple Messages plugin that can read your conversations on a Mac, write replies for you, and send them. It runs on your own computer, and it comes with a setting that OpenAI itself tells you to leave switched off.
The Gist
- ChatGPT can now search your Mac message history, summarise old threads, and draft replies.
- It can send texts as you, and delete messages, once you grant it permission.
- OpenAI says it runs locally and does not build an index of your messages.
- The company warns against turning on permanent approval, which removes your last chance to review a text before it goes out.
Have ChatGPT Recap This Article
ChatGPTWhat the ChatGPT Apple Messages plugin actually does
A plugin is a small add-on that lets a piece of software reach into another one. In this case, it lets ChatGPT open the Messages app on a Mac and work with what is inside it, instead of staying in its own chat window.
Once it is switched on, you can ask ChatGPT to find a conversation from three months ago, sum up a long group thread you never read, or suggest a reply to a message you have been avoiding. It handles iMessage, ordinary SMS, and RCS, so it covers texts from friends on iPhones and friends on Android alike.
The part that raises eyebrows is the writing side. ChatGPT can draft a message, then send it as you, and it can also delete messages you no longer want sitting in a thread. The person on the other end sees a text from your number, with nothing marking it as machine written.
This lands a couple of weeks after ChatGPT finally got its own desktop app on Linux, and it follows the same direction. The chat box is becoming a control panel for the apps you already have open.
How to switch it on, and what you need first
You install the ChatGPT Apple Messages plugin from inside the desktop app. Open Plugins, then Public, and pick the Apple Messages entry. There is nothing to download from a website, which also means there is no lookalike version floating around for someone to trick you with.
Three conditions apply before it works at all. You need a Mac, you need the desktop version of ChatGPT rather than the website or the phone app, and the plugin ships in the build made for Apple Silicon, which is the chip Apple has put in its Macs since late 2020. Older Intel Macs are out.
macOS will then ask you to approve access, the same way it does when an app wants your microphone or your photos. Nothing happens until you say yes, and you can take that permission back later in your system settings without uninstalling anything, the same way you can see and erase what ChatGPT remembers about you.
It works across ChatGPT, ChatGPT Work and Codex, so a personal account and a work account both get it. If your Mac is managed by an employer, the plugin list may be locked down, and that is a decision your IT team makes rather than one you can flip yourself.
Keep learning on AI Noobies:
- Context Window: Why ChatGPT Forgets What You Said
- Your AI Forgets Instructions in Long Chats
- ChatGPT Trip Planning Works Until It Invents a Hotel
The one setting OpenAI tells you not to turn on
By default, ChatGPT shows you the text it wants to send and the person it is sending to, and waits. You read it, you approve it, it goes. That review step is the whole safety design, and it is worth understanding before you get tired of clicking.
There is an option to grant permanent approval, which stops the asking. OpenAI’s own warning is blunt about the cost: it removes your final chance to review a message before ChatGPT sends it as you. A misread instruction then becomes a text your friend, your landlord or your boss actually receives.
On the privacy side, OpenAI said the plugin runs locally on your machine and does not create an index of all your messages, meaning it does not build a searchable copy of your conversations somewhere else. The company has not spelled out what happens to the specific message text that gets processed when you ask a question about a thread.
That gap matters more than it sounds. Message content and stored memory are two separate piles, and a promise about one of them says nothing about the other, so treat the local processing claim as covering storage rather than everything the plugin touches.
How to try it this week without regretting it
Start with the read-only half of the ChatGPT Apple Messages plugin. Ask it to find the message where a friend sent you an address, or to summarise a group thread from a trip you took. Nothing leaves your Mac, and you get a feel for how well it understands who is who in a conversation.
When you move to drafting, pick a low-stakes reply first. A message to a group chat about dinner is a better test than a message to a client. Read what it wrote before approving, and notice whether it sounds like you or like a customer service department.
Leave permanent approval alone. The clicking is mildly annoying, and it is the only thing standing between a misunderstood instruction and a sent text. Keep the review step on for as long as you use the plugin.
Zooming out, this is the same fight playing out across your whole phone. Apple is building its own assistant into the system, and the new Siri app is aimed squarely at ChatGPT. Whichever one you end up trusting with your messages, the question you will keep answering is how much of your own voice you are willing to hand over.
Stay tuned on AI Noobies.
About the Author
