It sounds like it should be handled by Gmail in their OAuth access implementation. As described in the post, it sounds kind of scary that by giving access to Gmail, you give access to all your account with no granularity whatsoever.
Gmail could do that by pairing the OAuth access with a set of permissions which would basically be the filters Matt describes. The way other services (Facebook comes to mind) are doing it basically.
agree, as much as I love the idea, theres no way I want to allow anyone other than google to have access to my email. They would essentially be able to mine.. all my bills, expenses, and income, all my contacts and plans.. etc pretty much have access to my entire life.. yes I know google does, but giving it to google is much better than giving it to some startup who may not be around a year from now, and decide to sell all this data to the highest bidder, and who knows where else that will go.
Gmail could do that by pairing the OAuth access with a set of permissions which would basically be the filters Matt describes. The way other services (Facebook comes to mind) are doing it basically.