Siri asks permission to access the app and then pulls in the requested data. Note that this does not currently appear to work ...
Local models are trained on tool calling these days, and they can be pretty good at it, too.