ChatGPT Now Reads Your iMessages. The Harder Question Is What the Data Does Next.

OpenAI shipped a ChatGPT plugin for Apple Messages on the Mac on or around August 20. 9to5Mac reports the plugin can search, summarize, draft, and send iMessages directly from the ChatGPT app on macOS (9to5Mac). OpenAI's official ChatGPT account confirmed the launch on X (ChatGPT on X).

The plugin is a data path between the contents of your text messages and OpenAI's servers. Whether it stays a thin one depends on what the Apple Intelligence stack does on the way through. If message contents are processed on-device by Apple's AI layer and only narrow requests reach OpenAI for inference, the privacy footprint is closer to a smart search bar. If raw message bodies are uploaded to OpenAI for analysis, the footprint is the kind critics have been warning about for two years.

Gary Marcus argued in a Substack essay this week that OpenAI is "becoming a surveillance company" and pointed to the Apple Messages plugin as an inflection point (Gary Marcus, Substack). Marcus also claims OpenAI "refused (via mealy-mouthed legalese) to opt out of doing surveillance for the US government of US citizens," a serious allegation he asserts but does not document in the excerpts available. The claim is one informed critic's read of a public posture, not an established fact, and it is worth treating it that way.

The forward-looking piece is Sam Altman's reported remark that ChatGPT could "watch your screen, meetings, and emails" within six months (Times of India). That statement is a CEO describing a roadmap, not a confirmed product. It is, however, the most direct public signal yet about which direction the data flow is being designed to grow. Marcus has argued for years that the pattern is intentional, citing Altman's earlier comments about wanting to train on users' personal documents and his co-founding of WorldCoin, the iris-scanning identity project (Gary Marcus on X). Pattern arguments are useful, but they are not the same as evidence about a specific data flow.

Under the Electronic Communications Privacy Act, the default for stored messages is that a provider can read them and, with a valid warrant or court order, hand them to law enforcement. FISA 702 lets US intelligence agencies compel data on non-US persons reasonably believed to be located abroad, and recent expansions have, in practice, given agencies a way to request data on Americans in some circumstances. OpenAI's transparency reports list national security requests separately, and its public posture, like that of other major US providers, is to comply with valid legal process. The question worth asking is how often OpenAI hands data over, under what authority, and with what minimization.

Before installing the plugin or opting into future audio features, three checks are worth running:

1. In the Mac plugin settings, confirm whether message processing routes through Apple's on-device stack or OpenAI's servers. Apple's developer documentation for the Messages extension framework is the canonical source; OpenAI's privacy notice for the plugin should match.
2. Read OpenAI's most recent transparency report for the number of government data requests, the number complied with, and the share that came with a non-disclosure order.
3. If you do not want message content in OpenAI's training or retention pipeline, set data-sharing controls in the ChatGPT app explicitly. The default is not always the most conservative setting.

The Apple Messages plugin is shipping now. The screen-watching and audio-watching version is reportedly on a six-month clock. The privacy case for or against either will be settled by what the data flow actually does, not by the labels attached to the company.