@ptoomey3 @rjbs @mimestream That’s a good question! The app itself does have to ask for the full Gmail access scope in order to perform its function as an email client, which is what it does today. The new push service itself asks for nothing and doesn’t have any Google tokens at all. I know there will be lots of questions on the details, so the blog post outlining how all of this works is definitely coming!