Good question. You'll need to trust the company behind this, and make sure the scopes they're requesting are reasonable. Similar to any other app you use that asks you to "sign in with x". Luckily here, the company behind this (https://www.blockspring.com) is used by thousands of businesses, so a safe bet.