In 2017, Unroll.me sold aggregated user data to Uber — including anonymised purchase receipts scraped from their users' emails. The backlash was swift, but it raised a question few had considered: what exactly are inbox cleaners reading when they access your Gmail?
Inbox cleaner privacy isn't just a technical concern — it's a fundamental question about who gets to see your financial statements, your medical notifications, your private conversations. Most people grant email access without reading the permissions. This guide breaks down exactly what different tools can access, how to evaluate their privacy practices, and which questions to ask before you hand over your inbox keys.
Understanding OAuth Permissions: The Gateway to Your Email
When you connect an inbox cleaner to Gmail, you're granting OAuth permissions — essentially giving the app a key to specific parts of your account. But not all keys are equal.
Gmail's API offers different permission scopes, ranging from minimal access to full read/write control:
- Metadata-only access: Can see sender addresses, subject lines, and dates — but not email content
- Read-only access: Can read the full content of every email in your account
- Full access: Can read, modify, delete, and send emails on your behalf
Here's the uncomfortable truth: most inbox cleaners request full access. They justify this by saying they need to delete emails or create filters. But there's a massive difference between needing to delete emails and needing to read the body of every message you've ever received.
Before connecting any tool, check the Google permissions page at myaccount.google.com/permissions. You'll see exactly what access each connected app has.
What Popular Inbox Cleaners Actually Access
I reviewed the privacy policies and OAuth scopes of six popular email cleaning tools. The differences are stark.
Tools that read full email content:
- Clean Email — reads email bodies to enable content-based filtering
- SaneBox — analyses email content to learn what's important to you
- Mailstrom — accesses full messages for grouping and analysis
Tools with more limited access:
- InboxClean — reads only email headers (From, Subject, Date, List-Unsubscribe). The email body is never accessed or stored.
- Leave Me Alone — focuses on newsletter detection via List-Unsubscribe headers
This isn't about one approach being universally