Fears Confirmed: Third-Party App Developers Can Access Your Gmail

access-gmail-emails-featured

We always knew this was happening. Some chose to focus on it, while some chose to deny it. Third-party app developers have access to your Gmail, meaning they can read them, and they even let employees read them.

Email Access

Originally reported in The Wall Street Journal, the report mostly mentioned two apps. It’s not good news if you use either “Return Path” or “Edison Software”. They’re looking at your emails.

Return Path analyzes inboxes and collects data for marketers, so it makes sense for them to have that access. But the report says the company’s employees read about 8,000 emails when they were developing the software a couple years ago.

Edison Software helps its users manage their emails. They, too, needed to go through email to develop it. Employees read “thousands” of emails when building the app’s “Smart Reply” feature.

news-third-party-gmail-inbox

It’s understandable that the apps needed to have access to and read your gmail. And both apps claim they have the consent of their users with it being spelled out in their user agreements. And Google itself gets permission to share the info with third-party apps.

So Is It That Bad?

Many people either assumed Google was doing this or read the user agreement and knew. But we know not everyone reads all the boring user agreements. Google claims they thoroughly examine app companies that will need your data and has a privacy policy.

Return Path defended their need to read emails. “As anyone who knows anything about software knows, humans program software — artificial intelligence comes directly from human intelligence,” Return Path posted on a blog.

Any time our engineers or data scientists personally review emails in our panel (which again, is completely consistent with our policies), we take great care to limit who has access to the data, supervise access to the data.

news-third-party-gmail-hand

Edison claims they no longer read emails, but that makes sense since they already trained their app. They don’t need to. They said, “We have stopped this practice and expunged all such data in order to stay consistent with our company’s commitment to achieving the highest standards possible for ensuring privacy.

What’s the Harm?

So was there any harm done? It’s hard to tell. Sure, they utilized user agreements, but those aren’t read by everyone every time. You just want to use the app. You don’t want to spend twenty minutes reading all the legal mumbo jumbo.

And many of us who understand the process knew it was probably happening; it just wasn’t confirmed. Now it was, and it still feels like an invasion of privacy. To our knowledge we weren’t harmed, but we don’t really know what these users did with the knowledge gleaned from reading our emails. That’s why we never share information such as credit card numbers and the like within emails.

We just don’t know what they really did with our information, and that’s what makes us squirm a little in your chairs reading this, no matter what we knew beforehand.

How do you feel about this? Are you surprised, or did you know full well it was happening and allowed it anyway? Let us know how you feel about this in the comments below.

Image Credit: Google Gmail email inbox interface on the Apple MacBook Pro screen by Alexey Boldin/Shutterstock

Subscribe to our newsletter!

Our latest tutorials delivered straight to your inbox

Laura Tucker Avatar

Read next

When survivors near Lake Nyos woke on the morning of 22 August 1986, the cattle were dead in the fields, the birds had fallen out of the trees, and 1,746 of their neighbours were lying where they had stood the night before, with no fire, no flood, and no wound to explain it.
In October 2002, a Russian scientist named Dimitri Malashenkov stood up at a space conference in Houston and quietly explained that the dog Laika, whom the Soviet Union had publicly mourned as a heroic week-long orbiter in 1957, had actually died of heat and panic within about five hours of launch.
In August 2006, naturalists Chris Atkins and Michael Taylor waded into a remote grove in Redwood National Park and pointed a laser rangefinder at a tree that turned out to be 380 feet tall, and the National Park Service has refused to disclose its location ever since, fearing the foot traffic alone would kill it.
The U.S. Army has officially pushed “jailbroken” software updates to active weapon systems in the Middle East — a frantic, 30-day tactical sprint designed to strip away manufacturer code restrictions so legacy anti-drone cameras and missile radars can finally talk to each other
Five years ago, a group of researchers walked out of OpenAI over safety concerns to build a quiet rival named Claude — and after a historic $65 billion funding round that valued the company at $965 billion, those ex-employees have officially leapfrogged their former bosses to create the most valuable AI startup on Earth
Anthropic’s unreleased Claude Mythos AI has proven so terrifyingly good at hacking legacy software that the firm locked it behind a secret vetting program — and global central banks are now holding emergency briefings over fears the model could easily “crack open” the invisible, decades-old code holding the world’s banking systems together
OpenAI has launched a massive $4 billion corporate engineering initiative called “DeployCo” to embed elite developers directly into global banks and enterprises — a quiet, aggressive push to replace traditional software workflows with custom, domain-specific AI networks that operate entirely on their own
A breakthrough in solid-state lithium-sulfur batteries has quietly achieved double the energy density of standard EV batteries — a quiet laboratory victory that could finally eliminate “range anxiety” and cut the weight of electric cars in half