ChatGPT Demands Full Disk Access to Read Mac Messages

OpenAI has introduced a new Apple Messages plugin for its ChatGPT desktop application on macOS, allowing the AI to read, search, and send texts directly from a user's computer. Available across all subscription tiers, the integration functions specifically within Codex and ChatGPT Work environments rather than standard chats. To operate, the plugin requires users to grant Full Disk Access in their macOS System Settings, alongside permissions for contact names and automation tools.

Once enabled, the tool can parse iMessage, SMS, and RCS threads to draft replies, summarize conversations, extract calendar events, or find specific information. OpenAI stated to Bloomberg that the plugin processes data locally on the Mac and does not build a permanent index of a user's messages. However, the company advises users against enabling persistent approval for the tool, warning that doing so removes your final chance to review messages before the AI transmits them. It also does not support remote interaction with ChatGPT through the Messages app itself.

For IT administrators and security practitioners, this deep system-level access introduces notable compliance and security challenges. Granting Full Disk Access to a third-party AI tool effectively widens the attack surface of the macOS environment, making the ChatGPT app a high-value target for malicious actors seeking access to sensitive communications. Organizations must carefully weigh the productivity benefits of automated message drafting and scheduling against the risk of exposing proprietary conversational data to an external application.

The development also signals a broader push by OpenAI to integrate deeply with Apple operating systems, potentially setting up future conflicts on iOS and iPadOS. This is especially relevant in the European Union, where the Digital Markets Act mandates that Apple provide third-party developers with the same deep system APIs it uses for its own AI services. While Apple has delayed its own Siri AI features in Europe over privacy concerns, OpenAI's aggressive integration on macOS highlights the escalating battle over user data access.