You are using an older browser version. Please use a supported version for the best MSN experience.

'Pokémon Go' on iOS is digging deep into linked Google accounts

Engadget Engadget 11/07/2016 Nicole Lee
© Provided by Engadget

If you spent your weekend wandering around capturing cartoon monsters on your phone, you're likely one of millions addicted to Pokémon Go, the latest mobile game sensation. But if you played the game on an iPhone and signed in with your Google account, you also just handed the keys to your entire Google account to Niantic, the developer behind the game. As pointed out by Adam Reeve, a principal architect at Red Owl analytics, nothing in the sign up process indicates that you're giving the app full access to your account.

Indeed, according to the Google help page, this means that the application will now be able to "see and modify nearly all information in your Google account." That means that Niantic -- and, more importantly, anyone who has access to Niantic's servers -- will be able to read and access all your email, your Google drive docs, your search history, your private Google Photos and a lot more. To be clear, this wouldn't be a problem if you signed up for the game using Pokemon's own "Trainer Club" account, but Pokemon's servers appear to be down. Also, while this full access issue appears to happen predominantly on iOS, a few Android users have reported the same as well.

We've reached out to Niantic and to Google to get more information about what happened here. Right now, we hear they're still trying to clarify what's going on and we'll update you on their response if any. For now, however, we recommend revoking Pokemon Go's full account access by heading to this link and clicking "Remove." The game should still function if you have it open, but you'll probably have to reauthorize (and re-revoke) on future sign-ins.

Adam Reeve

More from Engadget

image beaconimage beaconimage beacon