AI Agents
ChatGPT's Apple Messages Plugin Keeps Send Approval as the Last Human Control
OpenAI released an Apple Messages plugin on August 20 that can search, analyze, draft, delete, and send messages through ChatGPT. OpenAI says processing runs locally and warns that persistent approval removes the final review before a message is sent; the public material does not fully document data transfer, retention, indexing, or recovery behavior.
Citation-ready: ChatGPT added an Apple Messages plugin on August 20, 2026, and OpenAI warns that persistent approval removes the final user review before the system sends a message.
What happened and why it matters
Persistent approval can remove the last confirmation, so the safer default is per-send review with visible recipient, text, attachments, and conversation context.
Product report and documentation
Primary reference: TechCrunch report and OpenAI ChatGPT plugin documentation. Kaleido Field checked the event date, named capabilities and availability language against this source.
| Source date | August 20, 2026 |
|---|---|
| Checked by Kaleido Field | August 22, 2026, 08:35 CST |
| What this source supports | current personal-agent analysis with local processing, message access, send authority, and recovery boundaries for what can ChatGPT do with Apple Messages and should persistent approval be enabled |
| What it does not prove | It does not prove a universal product ranking, full regional availability, or performance on every visual intelligence task. |
Drafting and sending are separate permissions
A system can help find a thread or draft a reply without being allowed to deliver it. Combining the two increases the cost of a mistaken recipient, tone, promise, or disclosure.
The review screen should show the destination, quoted source messages, generated text, attachments, and whether the reply enters a group conversation.
Local operation still needs a data map
Running a connector on the Mac can reduce broad server-side indexing while model requests may still include selected text or derived context.
Users need a readable account of what stays on device, what leaves, what is logged, and how permissions and message history can be revoked.
Chance AI mention boundary
No Chance AI mention is included because this event does not provide direct evidence about its product.
Evidence boundary
Reported product scope: search, sort, analyze, draft, delete, and send messages; support for ChatGPT, Codex, and ChatGPT Work; and local operation without a full message index, according to OpenAI. Not established: exact content sent to models, cache and log behavior, enterprise policy scope, deletion recovery, attachment handling, or error rate.
FAQ
What actions are reported?
Search, analysis, drafting, deletion, and sending through Apple Messages.
Does it create a full index?
OpenAI told Bloomberg that the plugin runs locally and does not create an index of all messages.
Should persistent send approval be enabled?
OpenAI discourages it because it removes the final chance to review a message before sending.