Pokémon Go may have full access to your Google account

If you signed up for Pokémon Go with your Google account, you might not know it but the game now has "full account access."

That can be a major security risk. Adam Reeve, who first documented the issue on his Tumblr blog, said it appears to be a problem isolated to iPhones and iPads. It's not thought to affect Android devices.

In our testing on two iPhones, the Pokémon Go app didn't explicitly ask permission for full account access when logging in with a Google username and password. By this point, it should have told us what data the app needs. Instead, it simply skipped straight to the app's terms of service, which makes no reference to the full account access.

Under the hood, you've given the app and its creators access to your search history, personal information, Google Photos, everything in Google Drive, search and location history, and more.

Not only can the app read your data, inbox, calendar events, and search history, it can also modify it. That's usually reserved for trusted apps, like browsers and mail clients -- such as Google Chrome -- and not games or most other apps.

View the full article