We have received just a handful of questions like this one, however we believe it might be in many other's mind.
This is always going to be an open question, because of valid user's concerns, and also for the developers to work on improvement and building trust.
Q. Can I trust the Mapping Sheet add-on, is it safe to use?
A. That's a very fair question, the same I would ask myself on this scenario.
Our short answer: yes, it is safe to use, you can trust this add-on.
However, that's not enough, you have to do your own research, and come to your own conclusions.
You have to trust the developer / organization behind the application
Whenever privacy is a concern, specially when the organization is holding other's people information, getting into this type of applications (namely add-on now) is very tricky, to say the least.
Trust in the Cloud is critical, and it requires time and transparency.
On this type of add-on, there is an advantage around the fact that everything is happening within the user's Google account. There is no data on third party servers, nor the developer has the chance to access anything. Although the script does have access: there is, where the trust is built.
Find below a few statements in favour of that trust:
** If there is anything else we can say or do to gain your trust, please let us know **
Other versions of this fundamental question:
Is this safe to use? The permissions popup mentioned it has access to my spreadsheets and it also connects to an external service. Is there any way to ensure my data isn't being sent to you?
How does the add-on developer build the trust necessary for an organisation to authorise things like 'manage my drive'?