The developers behind Pokémon Go are fixing a bug that gave the game far too much access to users’ Google accounts. Currently, the bug appears during the user account creation process.
For many players, signing into the game with a Google account is the most convenient option. Apps connected to the account can be granted access to basic data for your account, such as your name and email, which is quite common.
Another option called “full access” can see and modify nearly all information on your account, including your email. Google recommends that you don’t grant this level of access to applications you don’t fully trust, and most games don’t request this level of access. Up until the error was discovered on Monday, it was full access that Pokémon GO was requesting.
