My complaint is Google doesn't really support accessing Gmail accounts via IMAP with Oauth2. I say that because there is a catch-22 created by this absurd policy:

"The scope for IMAP, POP, and SMTP access is https://mail.google.com/. If you request access to the full mail scope for your IMAP, POP or SMTP app, it must be in compliance with our Google API Services: User Data Policy.

To be approved, your app must show full utilization of https://mail.google.com/.
If your app doesn’t require https://mail.google.com/, migrate to the Gmail API and use more granular restricted scopes."

Because my app doesn't need to permanently delete messages, Google Trust and Safety team refuses to verify the app and insists I rewrite my app to use Google's propriety Gmail API instead of industry standard IMAP protocol. Google has created this problem by requiring the absolute MAXIMUM scope permission just to use IMAP in any capacity or fashion. Google should allow IMAP access to work with more narrow, granular scopes instead of insisting independent software vendors rewrite their apps according to use Google's proprietary API.

Sincrerely,
Bradley Peet
Senior Software Engineer @ Altec Products, a subsidiary of Beyond Limits
bradleypeet@altec-inc.com

Issue 277134811

Links (1)

Issue metadata