That's kind of weird, I don't think I have this in my access list, but I use calendar all the time.

edit:Wow, guess not

Looks like it automatically comes back if I revoke it.

I'm trying to get some attention from Google about this (potential) privacy issue. How can I be sure that "google.com" is my own Google account? Why does the authorization get automatically renewed after I revoke it, and without my consent? Why does a Google service require an additional authorization to access my account, and why doesn't Google provide any information about it? Worse, I have no way to confirm that it isn't someone else's account that have full access to my data. If it's the case, someone may have read my private calendars for months, and the only way to stop this would be to delete my whole Google accounts and the 80+ services associated with it.

This issue has reported 4 months ago here http://www.google.com/support/forum/p/gmail/thread?tid=44a4a... and here http://blogoscoped.com/forum/173175.html (and I submitted a report at http://www.google.com/support/accounts/bin/request.py?contac...), but I haven't heard of any Google employee about it.

I'm 99.9% sure there's no privacy breach but I find troubling that they haven't reacted yet...