Pokemon Go on iOS wants full access to your Google account
Pokemon Go mania is in full swing all over the world even if it’s still not yet available in a lot of countries. However, before you install the game, be aware of this gaping security risk involved for the iOS version. Android players are not affected.
To play Pokemon Go, you can sign up for an account at Pokemon.com or use your Google account which a lot of people would probably do. What you are not probably aware of is that signing in with your Google account will give Pokemon Go full access to it without asking for your permission. To check for app’s permissions on your Google account, you can visit https://security.google.com/settings/security/permissions while logged in.
The developers may not have any malicious reasons for requesting full access to your account but it’s still not a good idea to give them permission. It’s up to you if you want to revoke Pokemon Go’s full access but doing so will not allow you to play the game until they properly patch it. A workaround is to use a dummy Google account just to play Pokemon Go.