Take the 2-minute tour ×
Web Applications Stack Exchange is a question and answer site for power users of web applications. It's 100% free, no registration required.

From my experience with third-party Facebook apps, I'm wary of adding apps from the Google Apps Marketplace to my Google Apps installation.

Can I trust apps from the from Google Apps Marketplace? Does Google vouch for them or review them in any way? Or should I only trust companies that I already trust?

share|improve this question
add comment

1 Answer

up vote 2 down vote accepted

As a developer of one of these apps (DokDok.com) I'd say commparing Google Apps Marketplace to Facebook apps isn't really fair. Data access is needed in order to provide real value to your existing Google Apps. The objective isn't to spread as fast as possible among your friend list for some sketchy reason.

That being said, I don't believe there's any official audit from Google so people with bad intentions could probably get their way for some time until the word gets out. An important point to keep in mind is that Google Apps APIs are accessed through OAuth (even email data). This means that as a 3rd party app, all queries on your data are made using a unique secret token that doesn't require knowledge of your password and, most importantly, can be traced back to my app.

If you're hesitant on a given application, read their privacy policy and terms of services which should explain what they do with the access you grant them. Also, don't hesitate to email the developer for more information. Some of our users did ask for precision and we were happy to explain in greater details what data we were accessing, when we were accessing it and our caching policies on that data.

share|improve this answer
    
If an application is intentionally mischievous, you can't trust its privacy policy or terms of service. –  Senseful Aug 26 '10 at 3:47
    
+1 for stepping forward. However, your answer does make me think that malicious apps are very much possible, and that being in the Marketplace isn't a warranty of anything (much like the Android Market isn't). –  hpique Aug 26 '10 at 9:01
1  
Malicious apps are possible on pretty much any platform, including the app store on the iPhone. Google now does joint app releases for the Marketplace (we were part of the 1st one in June). These apps are reviewed internally by the Google Apps team. It's not a thorough security audit but they do try them and make sure they work well before promoting them. Sketchy behaviors would likely get caught. I guess my answer to the question "Can I trust apps from the Marketplace?" would be no more and no less than any other app (desktop, mobile or hosted) that gets access to your data. –  Bruno Morency Aug 26 '10 at 12:39
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.