It's just unfortunate that there is an ominous warning with no specificity. The only way I could hope to know what of my Google data is being used is to somehow read your project code.
Of course I don't expect that you have any interest in my data, but there's still a granularity problem here regarding access.