A lot of people are expressing concern about having to give you their Gmail password. Have you considered implementing an offline scanner for desktop clients that would then upload the contact and frequency information to your severs through SSL? You could then overlay your services in Thunderbird's/Outlook's/Mail's desktop interfaces.

That kind of kills the convenience of the service, but personally I would accept that for increased security.