I don't have a personal agenda other than good citizenship and concern for best practices that affect the community.
If you're dumping a file to my Dropbox, why do you need full read access to all folders?
If you adding a note to Evernote, why do you need full r/w access to my entire note store?
etc etc
The simple answer is often it's not needed. For example, Wappwolf gets it right in this case (http://i.imgur.com/Ug5Fi.png), by allowing the freedom to choose.
Sure it's simply easier and less hassle for a startup to deal with things like users privacy concerns.
However, if anything, it's an opportunity for you guys to be leading and setting the example in restricted, 'only what you require', SaaS security model.
This idea of giving exponentially more startups, complete access to your increasingly critical online services, does not seem wise at all.
Apologies for a bit of a rant, just rather passionate about this issue, and hope you guys will take it seriously :)