Elevating user trust in our API ecosystem
Blog post from Google Cloud
Google announced a series of new policies aimed at enhancing user trust and data security within its API ecosystem, particularly focusing on Gmail APIs, which will take effect on January 15, 2019. These updates include stricter access controls, ensuring third-party apps use data solely for user-facing features and not for unauthorized purposes like targeted advertising or market research. Additionally, third-party apps must meet minimum security standards, such as penetration testing and secure data handling, to prevent data breaches. Developers are encouraged to migrate to Gmail Add-ons for better security and the opportunity to list their apps in the G Suite Marketplace. Existing applications have until the end of 2019 to comply with the new security assessments, and apps accessing restricted scopes must undergo an application review starting January 15, 2019, to avoid having their access revoked.