Connect with us

Business

Google confirms Gmail messages read by third parties

Published

on

When Gmail users are linking their account to an external service they are asked to grant certain permissions
When Gmail users are linking their account to an external service they are asked to grant certain permissions

When Gmail users are linking their account to an external service they are asked to grant certain permissions

Google has confirmed that private emails sent and received by Gmail users can sometimes be read by third-party app developers, not just machines.

People who have connected third-party apps to their accounts may have unwittingly given human staff permission to read their messages.

Report claims that about 1.3 billion Gmail users unknowingly let third-party apps read their e-mails.

One company told the Wall Street Journal that the practice was “common” and a “dirty secret”.

Google indicated that the practice was not against its policies.

Advertisement

One security expert said it was “surprising” that Google allowed it.

Gmail is the world’s most popular email service with 1.4 billion users.

Google lets people connect their account to third-party email management tools, or services such as travel planning and price comparisons.

When linking an account to an external service, people are asked to grant certain permissions – which often include the ability to “read, send, delete and manage your email”.

Advertisement

READ: VIDEO: President Macron at the Afrika Shrine

According to the Wall Street Journal, this permission sometimes allows employees of third-party apps to read users’ emails.

‘Not asked permission’

While messages are typically processed by computer algorithms, the newspaper spoke to several companies where employees had read “thousands” of email messages.

Advertisement

Edison Software told the newspaper it had reviewed the emails of hundreds of users to build a new software feature.

Another firm – eDataSource Inc – said engineers had previously reviewed emails to improve its algorithms.

The companies said they had not asked users for specific permission to read their Gmail messages, because the practice was covered by their user agreements.

“You can spend weeks of your life reading terms and conditions,” said Prof Alan Woodward from the University of Surrey.

Advertisement

“It might well be mentioned in there, but it’s not what you would think of as reasonable, for a human being in a third-party company to be able to read your emails.”

Google said only companies that had been vetted could access messages, and only if users had “explicitly granted permission to access email”.

It pointed the BBC to its developer policies, which state: “There should be no surprises for Google users: hidden features, services, or actions that are inconsistent with the marketed purpose of your application may lead Google to suspend your ability to access Google API Services.”

It said Gmail users could visit the Security Check-up page to see which apps they had linked to their account, and revoke any they no longer wanted to share data with.

Advertisement
Advertisement
1 Comment

1 Comment

  1. DaVinci

    July 4, 2018 at 8:59 am

    Now we realize there was truth in what Edward Snowden was telling the whole world.

Leave a Reply

Your email address will not be published. Required fields are marked *

Copyright © 2015 - 2024 ChronicleNG

Discover more from Chronicle.ng

Subscribe now to keep reading and get access to the full archive.

Continue reading