COLUMBUS (WCMH) — Have you downloaded the popular Pokemon Go game to your phone yet? If you used your Google account to sing up, you may have given up a lot of person information.
According to Popular Science.com, when a person signs into the game with their Google account, they grant the app full account access, including emails, search history, photos and other even your past locations.
The app could also send emails as you, which is a huge hacking opportunity, according to Popular Science.com.
Niantic, the developer of Pokemon Go, released a statement detailing exactly what the app can access.
We recently discovered that the Pokémon GO account creation process on iOS erroneously requests full access permission for the user’s Google account. However, Pokémon GO only accesses basic Google profile information (specifically, your User ID and email address) and no other Google account information is or has been accessed or collected. Once we became aware of this error, we began working on a client-side fix to request permission for only basic Google profile information, in line with the data that we actually access. Google has verified that no other information has been received or accessed by Pokémon GO or Niantic. Google will soon reduce Pokémon GO’s permission to only the basic profile data that Pokémon GO needs, and users do not need to take any actions themselves.
CNN reports the app maker made several emergency fixes after gaining an unprecedented level of access into players’ personal lives.
“This is probably just the result of epic carelessness,” said computer security expert Adam Reeve. “I don’t know how well they will guard this awesome new power they’ve granted themselves… I really wish I could play, it looks like great fun, but there’s no way it’s worth the risk.”
Pokémon Go, is a free app that uses GPS technology to allow users to find Pokemon is various areas across the country. The app also allows the phone camera to function once a Pokemon is discovered; giving the user the option of taking a picture of the characters they collect in an actual setting.
The company plans to update the permissions it asks for in the coming days.
The other option to sign up for the game, using a Pokémon account, continues to remain unavailable.
What others are clicking on: