2. What You Are Actually Granting It
Twelve permission prompts, not three. And we checked the signature: the app is not sandboxed, which means those prompts are not the boundary they look like.
The WJS Desk
Sep 16, 2026 · updated 8 days ago · 5 min read
Install the app and macOS starts asking. Microphone. Contacts. Calendar. Photos. Most people click Allow because the prompt appeared while they were trying to do something else, and that is how it is designed to go.
This lesson is what each one actually unlocks, and which ones we would decline. We did not read the marketing page for this. We read what the app declares about itself.
Twelve prompts, not three
The app's own bundle declares twelve separate permission requests. You will not see them all at once; each appears the first time you use something that needs it, which is why nobody realises how many there are.
| Permission | What it unlocks | Our call |
|---|---|---|
| Microphone | Voice mode and dictation | Allow if you will talk to it |
| Camera | Taking a photo into a chat | Only when you first need it |
| Photos | Sending images from your library | Decline, drag files in instead |
| Photos, add | Saving generated images to your library | Optional, low risk |
| Contacts | Addressing messages and invites by name | Decline unless you use that |
| Calendars | Reading and updating events | Decline unless you use that |
| Calendars, full access | The same, unrestricted | Decline |
| Reminders | Reading and updating reminders | Decline unless you use that |
| Reminders, full access | The same, unrestricted | Decline |
| Location | Local recommendations, weather | Decline, type your city |
| System audio capture | Recording meeting audio | Only for that specific job |
| Apple Events | Driving other Mac apps | The big one, see below |
The pattern to notice is that the bottom half are not about ChatGPT working better. They are about ChatGPT reaching into things that have nothing to do with a conversation.
The one that is different in kind
Apple Events is not like the others. Microphone lets it hear you. Apple Events lets it operate other applications on your Mac: read what is open in them, and in supported apps, change it.
That is the machinery behind Work with Apps, which is lesson 3 and genuinely useful. It is also the single broadest thing on the list, and it is worth granting deliberately rather than while you are mid-task. Decline it now, grant it in lesson 3 when you can see what it does.
The thing the prompts do not tell you
Here is what we found that no dialog mentions and no guide we could find covers.
The app is not sandboxed. macOS lets an application declare a sandbox, which confines it to its own container and whatever the user explicitly opens. We checked the app's signature and entitlements directly: the app-sandbox entitlement is not present.
codesign -d --entitlements :- /Applications/ChatGPT.appRun that yourself. What comes back includes automation for Apple Events, audio input, camera, address book, calendars and photo library, a shared keychain access group, and Apple Pay merchant capability. What it does not include is the sandbox key.
What that means, without the drama. An unsandboxed app runs with your user account's access to your files. Not just what you hand it: what you could open. This is normal for plenty of Mac software, Chrome included, and it is not evidence of anything bad. It does mean the twelve permission prompts are not the boundary they look like. They gate Contacts, Calendar and the rest. They do not gate your home folder, because nothing is.
Two smaller things from the same file. It declares associated domains for chatgpt.com, chat.com, platform.openai.com and web credentials for openai.com, which is how sign-in and deep links work. And it carries an in-app payments entitlement, so subscriptions can be bought through Apple rather than the web.
What it keeps on your machine
We measured the on-disk footprint. Sizes only, we did not read the contents:
| Location | Size |
|---|---|
| Application Support | 9.2 MB |
| Preferences plist | 4.5 MB |
| WebKit data | 428 KB |
A 4.5 MB preferences file is unusual. Preferences are normally a few kilobytes of settings; this one holds a large cached blob of account state. It also ships separate preference files for a feature-flag service and a product analytics SDK, which tells you the app is instrumented and remotely configurable. Neither is sinister and both are ordinary in commercial software, but if you assumed a chat app stores only chats, it does not.
What actually breaks if you decline everything
Worth knowing, because the prompts imply more urgency than they deserve. Decline all twelve and the app still does the thing you installed it for.
| Declined | What stops working | Does it matter |
|---|---|---|
| Microphone | Voice and dictation, silently | Yes, if you wanted those |
| Apple Events | Work with Apps | Only for lesson 3 |
| Contacts, Calendar, Reminders | Asking it to add events or address people by name | Rarely |
| Location | Local answers without typing a place | No, type the city |
| Camera, Photos | Photos from the library or the webcam | No, drag files in |
Typing, pasting, uploading files and the keyboard launcher all work with nothing granted. That is most of the product.
The failure mode to know about: a declined permission usually makes the feature absent rather than producing an error explaining why. If voice never appears, check Privacy and Security before concluding your plan does not include it.
The same thing on Windows
Windows has no direct equivalent of Apple Events, so the Work with Apps mechanism differs, but the privacy controls sit in the same shape of place:
Settings, Privacy and security
then Microphone / Camera / LocationWindows also has no sandbox distinction to check in the way macOS does, so the entitlement finding above is a Mac observation rather than a cross-platform one. We have not made the equivalent measurement on Windows and are not going to imply we have.
How to change your mind later
Nothing here is permanent, and this is the part worth knowing:
System Settings, Privacy and Security
then Microphone / Camera / Contacts / Calendars /
Reminders / Photos / Automation / AccessibilityFind ChatGPT in each list and toggle it off. The feature that needed it stops working and nothing else breaks. On Windows the equivalent lives under Settings, Privacy and security.
Our actual recommendation: grant microphone if you plan to talk to it, and nothing else on day one. Add permissions when a feature you want asks for one, so you are always trading a specific capability for a specific access rather than approving a list.
Before the next lesson
Open Privacy and Security and look at what ChatGPT already has. Most people are surprised by at least one entry, usually granted during setup while thinking about something else.
Next we grant Apple Events on purpose, and see what the app can actually do with what is on your screen.
