X

Pokemon Go can see everything in your Google account. Here's how to stop it

Read this if you installed Pokemon Go on an iPhone.

Jason Cipriani Contributing Writer, ZDNet
Jason Cipriani is based out of beautiful Colorado and has been covering mobile technology news and reviewing the latest gadgets for the last six years. His work can also be found on sister site CNET in the How To section, as well as across several more online publications.
Jason Cipriani
2 min read
pokemon-go.jpg
Enlarge Image
pokemon-go.jpg
Jason Cipriani/CNET

Editor's note at 6:11 p.m. PT: Niantic has acknowledged Pokemon Go gains unnecessary "full access" to users' Google accounts on iOS and is actively issuing a fix. If you're an affected user, no action is needed on your part.

PokeHype is here, it's real and isn't going anywhere soon. It's not all gravy, though. Dealing with server issues is one thing, but finding out an app has complete and total access to your Google account is another.

As Adam Reeve discovered after starting to play on his iPhone, if you use an iOS device and a Google account to sign up for Pokemon Go, the app is granted full access to your Google account.

That means the developer of Pokemon Go, Niantic, may have access to your emails, Google Drive, calendar, contacts, photos, Chrome browsing history, search history, Maps data... and, well, anything else linked to your Google account.

According to Google's support page, full access lets the application "see and modify nearly all information in your Google Account (but it can't change your password, delete your account, or pay with Google Wallet on your behalf)." That's not to say they are actively accessing said information, but the possibility is there for it to happen.

Not cool, guys.

How to revoke access

google-account-pokemon-go-full-access.jpg
Enlarge Image
google-account-pokemon-go-full-access.jpg
Screenshot by Jason Cipriani/CNET
  • You'll need to visit this page.
  • Sign in to the same Google account you used for Pokemon Go.
  • Click on "Pokemon Go Release" on the list (it should be near the top, where all Full Access apps are listed).
  • Click Remove, then OK.

If you're still signed into the app on your iOS device, it appears you can continue using it without issue. At least that's been my experience, having revoked access nearly an hour ago at time of this writing and I'm still catching those pesky critters in my office.

However, the next time the app randomly signs you out (I can't be the only that's happening to), you'll need to log in and revoke access again. Not an ideal method.

One alternative is to sign up and use a Trainer Club account, but you'll have to start your game from scratch.

The issue only seems to be affecting iOS users. Android users who've used Google to log in to the app haven't granted full access, or any access, for that matter, to his or her Google account.

Updated at 5:55 p.m. PT: Adds details about Google's definition of "full access" from its support page.