UPDATE:

A representative from The Pokemon Company provided the following join statement from Niantic and The Pokemon Company:

"We recently discovered that the Pokémon GO account creation process on iOS erroneously requests full access permission for the user’s Google account. However, Pokémon GO only accesses basic Google profile information (specifically, your User ID and email address) and no other Google account information is or has been accessed or collected. Once we became aware of this error, we began working on a client-side fix to request permission for only basic Google profile information, in line with the data that we actually access. Google has verified that no other information has been received or accessed by Pokémon GO or Niantic. Google will soon reduce Pokémon GO’s permission to only the basic profile data that Pokémon GO needs, and users do not need to take any actions themselves.

For more information, please review Niantic’s Privacy Policy here: https://www.nianticlabs.com/privacy/pokemongo/en "

Original story follows:

Loading

having become the top free and grossing app on the iOS app store within days of its launch . However, the app is unexpectedly giving Niantic access to more than just a huge player base.The app, popular on both iOS and Android devices, requires users to sign into Pokemon Go using a Pokemon Trainer Club login or a Google account. Those who choose to log in with their Google account are unknowingly granting the app full access to account information, including emails. Pokemon Go's login process does not notify users of the level of access being granted.There is no current evidence that Niantic Labs and The Pokemon Company are actively gathering information from its millions of Pokemon Go users' accounts. However, with full access, the application can "see and modify nearly all information" in a user's Google account, according to Google's help page , making this a serious security risk for many Pokemon Go users.Google recommends only granting this type of access to applications that users "fully trust."Pokemon Go's security risk was first reported on by researcher Adam Reeve , who has since posted an update mentioning that this behavior is reportedly only consistently showing up for iOS users. As The Verge notes, Pokemon Go players using Android devices have less regularly been able to find the same permissions granted to the app.Users can check their app permissions through their Google account.IGN has reached out to Niantic Labs, The Pokemon Company, and Google for a statement. We'll update this story should we hear back.Head over to IGN's Pokemon Go wiki for more on Pokemon Go.

Nicole is a freelance writer for IGN. You can follow her on Twitter