The Wall Street Journal reported that the practice is “common” and described as a “dirty secret.” Google said it complies with its policies, though one security expert called it “surprising.” Gmail, with 1.4 billion users, lets accounts be linked to external services like travel planners or price comparison tools. These apps often request permissions to read, send, delete, and manage emails. While typically handled by software, several companies admitted employees had reviewed thousands of emails. Edison Software analyzed hundreds of users’ emails to test new features. eDataSource Inc. engineers read emails to refine algorithms. Both said the practice was covered under user agreements, though users hadn’t been specifically asked. Experts criticized this as unreasonable. Google emphasized that only vetted companies with users’ “explicit” permission can access emails, citing developer policies that forbid hidden or misleading practices. It advised users to check the Security Check-up page to review and revoke app access if desired.