OpenAI has launched a new Messages plugin for the ChatGPT desktop app that can read, search, and summarize iMessage, SMS, and RCS conversations on Macs with Apple silicon. The feature, which also allows the AI to draft and send replies, is available across all plans but raises significant privacy concerns.
TL;DR
- OpenAI's new plugin for ChatGPT desktop app reads and summarizes iMessage history on Macs with Apple silicon.
- The feature can draft and send messages, with explicit approval required by default, but users can disable this setting.
- Privacy concerns arise as the plugin can expose group chat participants who did not consent to having their messages summarized.
What happened
OpenAI has introduced a Messages plugin for the ChatGPT desktop app that integrates with iMessage, SMS, and RCS conversations on Macs running Apple silicon. The plugin can read, search, and summarize conversations, as well as draft and send replies. The feature is available to all users, with more advanced capabilities for ChatGPT Work and Codex users. However, it is not compatible with Intel-based Macs.
The plugin requires explicit approval for each outgoing message by default, but users can grant persistent approval, allowing the model to send messages without further confirmation. OpenAI advises caution before enabling this setting. Notably, there is a known defect where certain tasks can disable the approval prompt, which OpenAI has documented but not fixed.
Why it matters
The new plugin raises significant privacy concerns, as it can summarize conversations involving participants who did not consent to having their messages analyzed. This is particularly relevant in group chats, where a single participant enabling the plugin can expose the entire thread. The enterprise version of ChatGPT Work also poses questions about the handling of mixed personal and professional correspondence on managed Macs.
OpenAI's plugin operates without Apple's involvement, as it accesses the Messages database stored locally on the device. This highlights a distinction in Apple's end-to-end encryption, which protects messages in transit and at rest but not from authorized software accessing the decrypted database. The timing of this release is notable, given the recent deterioration of the Siri partnership between the two companies.
Key facts
- The Messages plugin is available for Macs with Apple silicon and is not compatible with Intel-based Macs.
- The plugin can read, search, and summarize iMessage, SMS, and RCS conversations.
- It can draft and send replies, with explicit approval required by default, but users can disable this setting.
- OpenAI has documented a known defect where certain tasks can disable the approval prompt.
- The feature is available across all ChatGPT plans, with fuller behavior in ChatGPT Work and Codex.
- Apple has not commented on the integration and has no obvious mechanism to block it without affecting legitimate software.
- The privacy implications extend to all conversation participants, not just the user enabling the plugin.
- OpenAI has not provided clear guidance on how administrators should handle mixed personal and professional correspondence in enterprise settings.
Context
This development is part of a broader pattern from OpenAI, which has recently introduced features that log keystrokes and encourage users to connect their bank accounts. These features trade privacy for convenience, raising questions about the balance between user experience and data protection. The Messages plugin further underscores the need for clear disclosures about data handling and processing, particularly when dealing with sensitive communications.
