| https://developers.google.com/terms/api-services-user-data-p... is somewhat ambiguous on this front: > Limit your use of data to providing or improving user-facing features that are prominent in the requesting application's user interface; > Don't allow humans to read the data, unless: You first obtained the user's affirmative agreement to view specific messages, files, or other data, with the limited exception of use cases approved by Google under additional terms applicable to the Nest Device Access program... Did Slack make it clear to the user sharing their Drive link that the preview isn't just visible to them, but to anyone in the channel or who has access to the link? Was that clear enough to be affirmative agreement? Is the little area where the preview is shown while you're composing a Slack message prominent enough to display that it will include a screenshot of the data? Clearly, Slack thinks the answer to all these questions is yes, and Google either agrees or isn't enforcing their guidelines here. (...As an unrelated point, the fact that the Nest Device Access guidelines are an explicit exception to even this modicum of user visibility, that the guidelines aren't linked, and can be unilaterally changed by Google without notification to users is... well, why I don't own Nest devices.) |