Hacker News Reader

Same, it even asked me to manage my domain. I stopped right there and quitted.

It actually doesn't manage your domain, but pulls data from google's domain admin API to make adding new users from your domain a easy process. On hindsight, it seems that if you don't know about the API you might get paranoid about the notice; my bad on that part.

We wrote the email services to use your own gmail accounts. Since the app is only clientside, you have nothing to worry about. Those permissions will only activate when you are on the app.

I'm certain you're right, but surely you can see how trusting a stranger on the internet isn't really a viable option. If you're interested in getting people to use your framework, it sure would be nice if there was a demo for your framework that didn't involve giving you so much access.

But you can revoke the permissions later, as I did.