Security researchers have tested nearly 1,000 enterprise apps offered on Google’s G Suite Marketplace and discovered that many ask for permission to access to user data via Google APIs as well as to communicate with (sometimes undisclosed) external services.
“The request to ‘Connect to an external service’ is notable, as it indicates apps can communicate with other online APIs that neither Google nor the app developer might not control,” they pointed out.
They also noted that the app authorization prompt only discloses if an app can connect to external services, but does not name these external services not does it explain what the app is using those APIs.
“While some developers do elaborate on this in their apps’ Marketplace listings or external privacy policies, a cursory spot check on a selection of these 481 apps shows thi ..
Support the originator by clicking the read the rest link below.
