OpenAI has launched an Apple Messages plug-in for ChatGPT, letting the chatbot read, sort, edit, draft, and send iMessages on a user's behalf. The integration went live on August 20, 2026 and works with Codex and ChatGPT Work in addition to the consumer product, extending the same message-handling surface to developer and enterprise contexts.
The pitch is that ChatGPT becomes a first-class client for the user's own text history. A launch demo shows the chatbot proposing follow-up messages to contacts based on the previous day's conversations. Users can also ask it to delete threads, draft outbound texts, or dig up information buried in old message history — the kind of retrieval task that iMessage search has long handled poorly.
The plug-in slots ChatGPT into a category that competing agents have been circling for months. Message triage, calendar handling, and email drafting are the obvious near-term jobs for a general-purpose assistant, and Messages is the most-used app on iPhone for a large share of Apple's user base. Getting a foothold there means the chatbot is no longer confined to its own window.
Key facts
- 01OpenAI launched an Apple Messages plug-in for ChatGPT on August 20, 2026, letting the chatbot read, sort, draft, and send iMessages.
- 02The plug-in also works with Codex and ChatGPT Work, extending the integration to developer and enterprise contexts.
- 03OpenAI told Bloomberg the plug-in runs locally on a user's machine and does not create an index of all someone's messages.
- 04OpenAI warns against enabling persistent approval, saying it removes the user's final chance to review outgoing messages.
- 05The launch demo shows ChatGPT drafting follow-up messages based on the prior day's conversations and searching deep message history.
Privacy is the immediate question, and OpenAI addressed it in a statement to Bloomberg. The company said the plug-in runs locally on a user's machine and that it "doesn't create an index of all someone's messages." What that means in practice — how much message content leaves the device, and for how long — is not spelled out in OpenAI's public materials.
“doesn't create an index of all someone's messages.”— OpenAI, company statement to Bloomberg
OpenAI has also drawn a line around outbound sending. The company encourages users to watch what ChatGPT is doing when it composes messages and specifically discourages turning on persistent approval, the setting that would let the chatbot send without a per-message confirmation.
In its own guidance, OpenAI warns that enabling that setting "removes your final chance to review a message before ChatGPT sends it as you." That is a notable disclosure from a vendor whose competitors have generally pushed toward more autonomous agent behavior, not less.
“removes your final chance to review a message before ChatGPT sends it as you”— OpenAI, company guidance to users
The design tension is real. An assistant that always pauses for approval is slower and less useful for the batch tasks the demo highlights, such as replying to a day's worth of conversations at once. An assistant that never pauses can send a hallucinated message under the user's name to the user's contacts, which is a category of failure with social consequences that no benchmark score fixes.
The Messages plug-in also lands in the middle of a broader OpenAI push on business features. Coverage this week showed the company clawing back ground on Anthropic among US businesses in Ramp's card-spend data, and OpenAI recently expanded Zero Data Retention to its frontier models and previewed a Private Safety Processing feature — moves aimed squarely at enterprise buyers who need to know what happens to their data.
Skeptics will note that a chatbot reading, drafting, and sending texts is exactly the sort of capability where a subtle failure — a hallucinated fact, a misread thread, an autofilled contact — becomes a message the user cannot unsend. The local-runtime claim narrows the surface area but does not eliminate it, and the specifics of what data leaves the device have not been documented in detail. TechCrunch reported it had reached out to OpenAI for more information at the time of publication.
The strategic read is that OpenAI is quietly turning ChatGPT into an operating layer that sits on top of the apps users already have, rather than trying to replace them. A Messages plug-in, plus Codex, plus ChatGPT Work is the same product wearing three hats — the chatbot as a shell over the phone, the IDE, and the workplace. Whether users trust it enough to hand over their inbox is the question that decides how far that layer extends.
Working on something we should cover, or seeing a story we missed? Send leads, documents, or feedback to hello@aichatdaily.com. For sensitive tips, see our secure tips page for Signal and PGP options.
Spotted an error? Email hello@aichatdaily.com with the URL and the issue, or read our full corrections policy.
