Google still allowing third-party apps read your Gmail: Report

Google has defended its policy allowing third-party applications to access Gmail account data, saying developers can share information with other companies as long as users are clearly informed about how their data will be used.

The clarification came after renewed concerns over Gmail privacy and reports that third-party app developers could potentially scan users' emails.

According to a CNNMoney report on Thursday, Google told US senators that third-party developers are permitted to share Gmail data with other parties provided they are transparent with users about such practices.

Susan Molinari, Google's Vice President of Public Policy and Government Affairs for the Americas, said in a letter to senators that the company also makes developers' privacy policies readily available so users can review them before granting access to their accounts.

The issue gained attention after The Wall Street Journal reported in July that third-party developers continued to have access to Gmail messages despite Google's assurances that privacy and security remained a priority.

Gmail has nearly 1.4 billion users worldwide, making it one of the largest email services globally. Its user base is larger than that of the next 25 biggest email providers combined, according to the report.

Google has argued that third-party access is necessary to allow users to connect Gmail with a wide range of useful services. These include independent email applications, travel-planning tools and customer relationship management (CRM) software.

Suzanne Frey, Director of Security, Trust and Privacy at Google Cloud, said the company continuously reviews developers and applications that seek to integrate with Gmail.

Before a non-Google application can gain access to Gmail messages, it must undergo a multi-stage review process, the company said. This includes automated and manual checks of the developer, examination of the application's privacy policy and website, and testing of the application to determine whether it functions as described.

Google said the system is intended to give both individual users and enterprise administrators greater visibility and control over how Gmail data is accessed and used.

The company has also sought to distinguish third-party access from Google's own advertising practices. In 2017, Google announced that its computers would stop scanning Gmail users' emails for the purpose of personalising advertisements.

The latest controversy, however, highlights the broader privacy challenge created by third-party integrations. While such applications can provide additional functionality, users may not always realise that granting an app permission to Gmail can potentially give it access to sensitive email information.

Google's position is that transparency, user consent and developer screening provide safeguards, while the debate has placed renewed focus on how clearly users understand the permissions they grant to third-party services.