Article
Is it safe to connect an app to your Google Analytics?
Gleamworthy · October 25, 2026
When an app asks to connect to your Google Analytics, Google shows a consent screen listing what the app wants to do. It’s worth a careful read. Here’s how to judge it.
Read the permissions
Google Analytics has several permission levels (called scopes). The common ones:
| Scope | What Google’s consent screen says | What the app can do |
|---|---|---|
analytics.readonly |
See and download your Google Analytics data | Read reports and settings. Nothing else. |
analytics.edit |
Edit Google Analytics management entities | Change properties, streams, and settings. |
analytics.manage.users |
Manage Google Analytics account users by email address | Add or remove people from your accounts. |
A dashboard only needs to read, so it should ask for read-only access and nothing more. If an app that only shows numbers asks to edit settings or manage users, that’s a red flag.
Ask where your data goes
Read-only access still lets an app download your analytics. The next question is what it does with them. Look for clear answers in the privacy policy:
- Is there a server? Many tools copy your data to their own servers. That isn’t necessarily bad, but it means trusting their security.
- Where are tokens stored? Google issues the app a token that keeps it signed in. That token is the key to your data. It should be stored securely, such as in your operating system’s keychain.
- Is data shared or sold? Apps using Google’s APIs must follow Google’s Limited Use requirements, which restrict how they can use and transfer your data. Look for a statement that they comply.
Check that the app is verified
Google reviews apps that request sensitive scopes, like Analytics access. An unverified app shows a “Google hasn’t verified this app” warning. A verified app has shown Google a public privacy policy and explained why it needs each permission.
Know how to undo it
You can remove any app’s access at any time:
- Go to myaccount.google.com/permissions.
- Find the app under your third-party connections.
- Remove its access.
The app’s token stops working right away.
How Synopsy answers these questions
Synopsy requests analytics.readonly, plus your email address so it can open Google Analytics in the right account. It has no server: it talks to Google directly from your Mac, stores tokens in the macOS Keychain, and contains no tracking or telemetry. Its Disconnect button deletes your tokens and cached reports and revokes access with Google in one step. Read the privacy policy for the full details.