ChatGPT Opens App Store

What happened

OpenAI has launched an integrated app store within ChatGPT, enabling direct access to third-party services such as Spotify, DoorDash, and Apple Music from the chatbot interface. This functionality permits users to execute actions, including playlist creation and grocery ordering, without exiting the chat environment. Concurrently, OpenAI released a Software Development Kit (SDK), inviting developers to create new applications that extend ChatGPT conversations by incorporating external context and facilitating in-chatbot actions. Developers are currently able to monetise their applications by linking to external native apps or websites, with internal monetisation options under review. Developers are mandated to provide clear privacy policies, and the app store is accessible via web and mobile versions of ChatGPT.

Why it matters

The direct integration of third-party applications within ChatGPT introduces new operational dependencies and expands potential data processing pathways, increasing exposure for IT security and compliance teams to data handling practices beyond OpenAI's direct oversight. This raises due diligence requirements for procurement and platform operators concerning the security posture and privacy policies of integrated third-party services. The change reduces visibility into the full scope of data processing and potential data egress points initiated by user actions within the chatbot environment, creating a visibility gap for internal monitoring.