Update: Niantic has issued the following statement:
We recently discovered that the Pokémon Go account creation process on iOS erroneously requests full access permission for the user’s Google account. However, Pokémon Go only accesses basic Google profile information (specifically, your User ID and email address) and no other Google account information is or has been accessed or collected.
Once we became aware of this error, we began working on a client-side fix to request permission for only basic Google profile information, in line with the data that we actually access. Google has verified that no other information has been received or accessed by Pokémon Go or Niantic. Google will soon reduce Pokémon Go’s permission to only the basic profile data that Pokémon Go needs, and users do not need to take any actions themselves.
Google lets you see the apps connected to your account at the My Account section of its website, and today we noticed something interesting: Pokémon Go, the new hit smartphone game that’s pretty much taking over the world, is getting full access to many users’ Google accounts. That’s the same privilege that Google Chrome and Chromecast get. Currently, this appears to affect those that have used the Google sign in feature in the iOS app…