Can I trust this add-on, is it safe to use it?
Have you asked that question?
We have received just a handful of questions like this one, however we believe it might be in many other's mind.
This is always going to be an open question, because of valid user's concerns, and also for the developers to work on improvement and building trust.
Q. Can I trust the Mapping Sheet add-on, is it safe to use?
A. That's a very fair question, the same I would ask myself on this scenario.
Our short answer: yes, it is safe to use, you can trust this add-on.
However, that's not enough, you have to do your own research, and come to your own conclusions.
You have to trust the developer / organization behind the application
Trust in the Cloud is critical, and it requires time and transparency.
On this type of add-on, there is an advantage around the fact that everything is happening within the user's Google account. There is no data on third party servers, nor the developer has the chance to access anything. Although the script does have access: there is, where the trust is built.
Find below a few statements in favor of that trust:
- We disclosed in the documentation, what the add-on does under each of your permissions, check the details on "Privacy and Terms"
- All the data you manage with this add-on stays within your Google account, more details on the same document under "In Detail - installation and user guide"
- The add-on can only access the spreadsheets where you use the add-on
- The Script can only access a private folder (xsMapping) it creates within your Google Drive and the data files it creates within that folder
- The only user information that is sent out of your Google account is your email address, for logging purposes. The add-on log file is a private file under the developer domain account.
- We cannot as persons, have access to any of the information on your account
- You can find real names, address, phone number, company, etc, behind this add-on
- Last but not least, we were part of the first add-ons at Google add-ons launch, what is not an endorsement, but it might be considered a hint on good reputation
** If there is anything else we can say or do to gain your trust, please let us know **
Other versions of this fundamental question:
Is this safe to use? The permissions popup mentioned it has access to my spreadsheets and it also connects to an external service. Is there any way to ensure my data isn't being sent to you?
How does the add-on developer build the trust necessary for an organisation to authorize things like 'manage my drive'? - this is no more
ps. no big deal, but we are on Google Maps as a verified business