Pokémon GO… you’ve heard of it, there’s almost no way you haven’t heard of it. I am exaggerating only very slightly when I say that everybody in the entire world is currently playing Pokémon GO. The game has attracted all kinds of attention, both good and bad. While the launch has been mostly positive, there have been a few hiccups too. Server issues have prevented players from playing and have slowed the game’s staggered rollout, and some iOS users may have noticed that the game was requesting a few too many permissions related to their Google accounts. Niantic has recognized the issue, and Pokémon GO on iOS should be fixed in the near future to take only the appropriate permissions.
Augmented Reality (AR) games like Pokémon GO do need specific access to various parts of your device to work properly. In the account creation process, users are able to use their Google account to log in. In most instances, you’ll be asked to give access only to specific portions of your account, or you’ll be notified about the access that the app requests. In the early days of Pokémon GO, there was no such request or notification on iOS, and users were simply providing full access to their Google account to Niantic.
If Pokémon GO is your first experience with Niantic, you probably don’t know that the company was once owned by Google. Working directly with Google, they were able to access the data that was necessary with their first AR game, Ingress. A benefit to that relationship is that Niantic is able to work closely with Google to make things right without any sort of player involvement. They released a statement earlier recognizing the problem, and outlining their methods for fixing it:
We recently discovered that the Pokémon GO account creation process on iOS erroneously requests full access permission for the user’s Google account. However, Pokémon GO only accesses basic Google profile information (specifically, your User ID and email address) and no other Google account information is or has been accessed or collected. Once we became aware of this error, we began working on a client-side fix to request permission for only basic Google profile information, in line with the data that we actually access. Google has verified that no other information has been received or accessed by Pokémon GO or Niantic. Google will soon reduce Pokémon GO’s permission to only the basic profile data that Pokémon GO needs, and users do not need to take any actions themselves.
While some were quick to jump on the issue and its consequences, there was little doubt that Niantic would plug the leak. With such a high profile game and launch, it would be foolish to leave themselves open to the scrutiny that would follow. Are you playing Pokémon GO on iOS? Have you seen your Google account access reduced yet? Let us know in the comments below or on Google+, Facebook, or Twitter.Source: Game Informer