there's a big difference between a permitted contacts api and just giving up your regular gmail password.