This is a really great app, and I have started using it. However, I do find it a little unsettling that it needs 100% read/write permissions on every calendar I have.
I would much prefer if the integration would allow me to select only a single calendar for sharing, where I can grant RW access, and know that my other calendars remain secure.
I have two concerns here. On one hand, it's a privacy thing - I don't want Quire to read my calendar and sell that information to third parties. On the other hand, it's just a risk thing. Although it is unlikely to happen, some kind of software bug with Quire's integration could interfere with my other calendars.
I have used a separate calendar within Google Calendar exclusively for Quire.
My concern was that, in the initial dialog (from Google, to link Quire to my Google account), the listed permissions included read/write/delete access for all of my calendars.
On the next screen (back to Quire, in the App setup), I was able to select just the calendar that I intended to use.
Although it is unlikely to ever happen, I believe that technically, because the app has read/write/delete access to all my calendars (not just the one that I've chosen to sync), a software bug in the app could nuke my personal (unsynchronized) calendar.
I don't expect that anyone would make Google API calls to that effect intentionally, but, if they occurred as the result of a bug or something, Google would permit the erroneous access. If the app were able to follow the principle of least privilege, such a catastrophic bug would instead be rather limited in impact.
Thomas Ferrell, Dec 13, 2024
Thank you for clarifying that my calendar data will not be accessed or sold.
Obviously I have chosen to use this integration anyway, and I believe there's not very much risk. Just wanted to highlight that trimming the permissions could reduce your risk exposure.
Thomas Ferrell, Dec 13, 2024
Hi, The wording view and edit events on all calendars when syncing with Google Calendar is provided by Google Calendar's API and cannot be customized by us. However, we want to assure you that Quire only accesses the specific calendar you choose to sync with, not all of your calendars.
If you have any questions about the two-way sync integration with Google Calendar in the future, please feel free to reach out. Thank you!
Golda, Dec 17, 2024
Hi, thank you for your feedback.
When syncing your projects to Google Calendar, you can either create new calendars in Google Calendar first and connect each Quire project separately, or choose to sync multiple Quire projects to a single Google Calendar. This provides flexibility in organizing and viewing your tasks.
Additionally, we want to assure you that we prioritize your privacy and security. We maintain strict access controls and do not sell your personal data to any third parties. Your data belongs solely to you. If our team ever needs to access your project for issue resolution, we will always request your permission first. For more information, please visit our Privacy and Security page.
Please feel free to let me know if you have any questions. Thank you.
Golda, Dec 12, 2024