Monday, July 11, 2016

Pokemon Go On iOS Has Full Access To Your Google Account [UPDATE]


When you sign in to use Pokemon GO one of the options you’re given is you can your Google account on iOS. This isn’t an issue as a lot of applications allow you to do this, but for whatever reason Pokemon GO asks for full access to your Google account which includes email, documents and whatever else you have stored in your Google account. It’s unlikely that anything bad will happen, but it’s still worth being aware of this if you decide to use your Google account to sign into the game. There is no reason to believe that your security is at risk but as we said, just be aware of the decision. Niantic has responded to Game Informers request for a comment on this issue.  
We recently discovered that the Pokémon GO account creation process on iOS erroneously requests full access permission for the user’s Google account. However, Pokémon GO only accesses basic Google profile information (specifically, your User ID and email address) and no other Google account information is or has been accessed or collected. Once we became aware of this error, we began working on a client-side fix to request permission for only basic Google profile information, in line with the data that we actually access.  Google has verified that no other information has been received or accessed by Pokémon GO or Niantic. Google will soon reduce Pokémon GO’s permission to only the basic profile data that Pokémon GO needs, and users do not need to take any actions themselves. For more information, please review Niantic’s Privacy Policy here:https://www.nianticlabs.com/privacy/pokemongo/en

UPDATE 7/13/16 - Niantic have released an update for the iOS and Android version of the app to fix the Google account permissions. 




No comments:

Post a Comment