Everyone's stoked about Pokémon GO, but if you're a privacy conscious player on iOS, you might not like the fact that Pokémon GO (and Ingress, for that matter) has complete access to everything in your Google account. Good news though, you can revoke that access. First of all, if you're not too deeply invested in the game, or you're just getting started, now might be a good time to set up a new, fresh Google account just for Pokémon GO if you'd rather play and avoid this whole still-developing fiasco.
Here's the issue: Pokémon GO takes "full account access" when you sign in with your Google account. This means Niantic, the company behind Pokémon GO, has access to everything in your Google account, including Gmail, Contacts and files stored in Google Drive, and has read/write permissions to all of it — and just about every other bit of data aside from your password. This is a level of access usually reserved for Google's own apps (for the record, Niantic used to be a Google company, before it was spun off on its own last year.) Here's how to revoke it:
- Head to your Google security page and look for Pokémon GO, like the screenshot above.
- Select Pokémon GO and then click "Remove" to revoke full access.
- Launch the game on your device and confirm it still works.
In my limited tests, the game still seems to work normally, but we've seen mixed reports all around with some people not being able to play without it (or, being able to log into the game without it,) so your mileage may vary.
Obviously, there's nothing saying that Niantic is collecting this data for malicious purposes, or even to sell your data, but considering that they don't explicitly ask you for it on iOS, it's a little surprising. Android users, however, are explicitly asked to allow this access.