MOUNTAIN VIEW, Calif. — It’s the game that has Nintendo’s stock skyrocketing and devoted players wandering into Australian police stations, but Pokémon Go players might be less enthusiastic if they found out the price of admission.
Those who downloaded the game to an iPhone and chose to sign in via Google gave the game’s developer, Niantic Labs, complete access to their Google accounts. Those who chose to sign in with a Pokémon “Trainer Club” account are not affected.
There’s no evidence that Niantic is playing “catch ’em all” with players’ personal info, but full access might make it possible.
The setting grants a third-party access to one’s search history, email contents, Google Photos, Google drive docs and much more, according to the search engine’s help site.
The sign-in issue is mostly affecting iOS users, but a few Android owners have reported similar problems, according to Engadget.
To take permission away from Niantic, players can adjust their settings.
The company sent a statement to Engadget confirming the reports, saying the “Pokémon Go account creation process on iOS erroneously requests full access permission for the user’s Google account.”
Niantic said it only accesses basic profile information — user ID and email address — and doesn’t collect or access any other information. Niantic said it is working to issue a fix, but players might want to be cautious in the meantime.
The company’s statement read:
We recently discovered that the Pokémon GO account creation process on iOS erroneously requests full access permission for the user’s Google account. However, Pokémon GO only accesses basic Google profile information (specifically, your User ID and email address) and no other Google account information is or has been accessed or collected. Once we became aware of this error, we began working on a client-side fix to request permission for only basic Google profile information, in line with the data that we actually access. Google has verified that no other information has been received or accessed by Pokémon GO or Niantic. Google will soon reduce Pokémon GO’s permission to only the basic profile data that Pokémon GO needs, and users do not need to take any actions themselves.