Why do you need the permission "View your contacts" (Google Contacts) when signing up? I would sign up and try the product but I'm not going to disclose all my contacts.
This import is there to let you invite your team more easily after signup. You can absolutely login with email password if you want to avoid that but do note that it's just an helper, the app won't send emails by its own.
I realize this can be a little bit (sometimes more than a little bit) of a development overhead to manage, but isn't the right way to do this is to only require the minimum oauth scopes upon signing up, then add additional scopes and re-auth at the time it's needed (i.e. when someone wants to perform an import)?
I tried logging in but it says there doesn't exist a team to join. So when I try to create a new team using gmail, it asks for my connections.
I also assume it won't send emails on its own, but still it's information that shouldn't be necessary for me to share in order to join your application.