Correct. Gmail is an example for token-based access. And usually there’s not much to object to if such services are upfront about what they’re doing and why.
If they don’t state that explicitly in their terms of service it’s even more problematic.
From their landing page:
Spark is fully GDPR compliant, and to make everything as safe as possible, we encrypt all your data and rely on the secure cloud infrastructure provided by Google Cloud.
Why would they even need a “cloud infrastructure” if they weren’t providing additional services?
This could lead to issues with an employer if you chose to use Spark and, without recognizing it, exported your company login information to a third party, probably even to a different legal jurisdiction.
Comments
Correct. Gmail is an example for token-based access. And usually there’s not much to object to if such services are upfront about what they’re doing and why.
If they don’t state that explicitly in their terms of service it’s even more problematic.
From their landing page:
Why would they even need a “cloud infrastructure” if they weren’t providing additional services?
This could lead to issues with an employer if you chose to use Spark and, without recognizing it, exported your company login information to a third party, probably even to a different legal jurisdiction.