You uninstalled that sketchy extension weeks ago, but its linked service may still have access to your Google data. Removing it from Chrome does not necessarily revoke a separate Google Account data grant. Only your Google Account settings can cut that cord.
What Is the Third-Party Apps & Services Page?
Signing in with Google and granting access to Gmail or Drive are different connection types. Review the app’s actual permissions instead of assuming that a Google sign-in gives it access to your mail. The Third-party apps & services page, also called the linked apps page, lists connections you can manage at myaccount.google.com/permissions. It is not an archive of every access request ever made.
Before You Begin
Make sure you have:
- A Google Account you can sign into
- A modern web browser (Chrome, Edge, Firefox, or Safari all work for the Google Account part)
- Chrome installed if you also want to manage extension-level permissions
- 10-15 minutes to review the full list; most accounts have more connected apps than people expect
| Requirement | Details |
|---|---|
| Device | Windows PC, Mac, or any device with a browser |
| OS version | Windows 10 or later, macOS 12 or later |
| Browser | Chrome recommended for the extension-management step |
| Account | Signed in to the Google Account you want to audit |
This is security housekeeping, not a software install. There’s nothing to download. Everything happens at myaccount.google.com and, separately, in Chrome’s own extension manager.
Step-by-Step Guide
Step 1: Open Your Google Account Security Page
Go to myaccount.google.com/security in your browser and sign in if prompted. Scroll down until you see Your connections to third-party apps & services. It’s a summary card listing a few recently active connections.
Step 2: Open the Full Connections List
Click See all connections underneath that summary card. This takes you to the complete Third-party apps & services page. You can also jump straight there by typing myaccount.google.com/permissions into the address bar.
Expected result: A list of linked apps and services. It may include services associated with extensions you already removed from Chrome.
Step 3: Identify the Extension by Name or Developer
Scan the list for the extension you’re looking for. No exact match? Look for the developer or publisher name instead. Google’s permissions page often shows the underlying service name rather than the storefront title.
Step 4: Click the App to See What It Can Access
Click on any entry to open its detail panel. This shows exactly which scopes it was granted. For example, “See, edit, create, and delete all your Google Drive files” or “Read, compose, and send emails from your Gmail account.” This view lets you review the permissions granted to the service.
Step 5: Revoke Access
For an app that can read or change Google data, select Access to your Google Account, open that app, choose See details, and review its permissions. Select Remove access, then confirm.
Stop using Sign in with Google removes the sign-in connection; it is not interchangeable with revoking a separate Gmail or Drive grant. An app can have more than one connection type, so inspect each one. If your interface offers Delete all connections, read its confirmation to check what will be removed.
Expected result: The unwanted data-access grant is removed. Revocation stops further access through that grant, but it does not erase data the service has already copied. Contact the developer about deleting stored copies.
Step 6: Check for Duplicate Entries
A developer may have several separately linked apps or services, and one app may have several connection types. Scroll through the entire page and repeat Step 5 for every entry tied to that extension or developer. Don’t stop at the first one you find.
Managing the Extension Itself, by Platform
Revoking access on myaccount.google.com stops the extension’s Google data access. It doesn’t remove or disable the extension in your browser. Those are two separate jobs. If you also want the extension gone, here’s where to do it on each platform.
Windows
- Click the Windows search bar or Start and type
chrome, then launch Google Chrome.
- In Chrome, click the three-dot More menu in the top-right corner, then select Extensions > Manage extensions. You can also type
chrome://extensionsdirectly into the address bar. - Find the extension in the list. Click Details to review its permissions, or Remove to uninstall it outright.
- Want to keep the extension but limit what it can do in the browser? Open Details and change Site access to On click or On specific sites instead of On all sites.
macOS
- Open Launchpad or press
Command + Spaceand typeChrometo launch the browser.
- Click the three-dot More menu in the top-right of Chrome, then choose Extensions > Manage Extensions, or navigate to
chrome://extensions. - Locate the extension, then click Details to inspect its permissions or Remove to uninstall it.
- Adjust Site access the same way as on Windows if you’d rather restrict the extension than delete it entirely.
Web (Any Browser)
The Google Account revocation steps work from any signed-in browser: Chrome, Edge, Firefox, or Safari. That’s because myaccount.google.com/permissions is a website, not a browser feature. Auditing a shared or work computer? You can complete Steps 1 through 6 without touching Chrome’s extension settings at all. Revoking access on the Google Account side is what actually protects your data.
Configuration: What to Check on Each Connected App
When you open an app’s detail panel, look for these three things every time:
- Scopes granted: the specific list of data types (Gmail, Drive, Calendar, Contacts, profile info) the app can read or write
- Last accessed date: a clue for whether the connection is still in active use or has been dormant for months
- Connection type: distinguish sign-in from permission to read or change specific Google data
Extensions that request broad scopes, like full Gmail or Drive access, but show no recent activity are the ones worth revoking first.
If You Run Into Trouble
Can’t find an extension by its Chrome Web Store name? Search by developer name instead. Publishers often register OAuth apps under a company name rather than the extension’s marketing title. If revoking access doesn’t seem to stick, refresh the permissions page. Confirm the entry is actually gone rather than collapsed. If an extension keeps prompting you to “reconnect” right after you revoke it, that’s normal. It’s just asking to create a brand-new connection, and you can decline.
Common Issues
Uninstalling the extension didn’t revoke its Google access
Why it happens: Removing an extension from Chrome only stops it from running in the browser. A separate Google Account grant may still let the linked service access your data. Review and revoke that grant as well.
Fix: After uninstalling, go to myaccount.google.com/permissions, find the matching entry, and click Remove Access or Delete all connections.
The extension stopped working after I revoked access
Why it happens: Revoking access invalidates the token the extension relied on to read or write your account data. Any feature depending on that connection breaks immediately.
Fix: That’s expected behavior. If you want to keep using the extension, sign in or grant permissions again the next time you open it. This creates a fresh connection.
I can’t tell Chrome permissions apart from Google Account permissions
Why it happens: These are two completely separate systems. Chrome’s Manage Extensions page controls what the extension can do inside your browser tabs. The Google Account permissions page controls what its backend service can do with your Gmail, Drive, and Calendar data.
Fix: For full protection, address both. Limit or remove the extension in Chrome, and separately revoke it on myaccount.google.com/permissions.
Tips and Hidden Features
- Review quarterly, on a set schedule: Set a recurring reminder to check myaccount.google.com/permissions every few months. Remove connections you no longer use.
- Check each connection type separately: Sign-in alone does not mean an app can read Gmail or Drive. Review any additional data permissions.
- Pair this with a Chrome extension audit: Malicious or data-harvesting extensions often request unnecessary permissions. Run your antivirus software’s browser scan alongside this review if anything looks suspicious.
- Turn on two-factor authentication: A hardware security key or authenticator app makes it much harder for anyone to re-authorize a malicious app, even if they know your password.
Wrapping Up
Once you’ve been through the Third-party apps & services list once, doing it again takes five minutes. It’s worth repeating every few months, especially after installing new browser extensions or signing up for services with your Google account. Revoking access here is the fix that matters. Uninstalling and revoking a separate data grant address different permissions.
| Step | Action | Applies To |
|---|---|---|
| 1-2 | Open Google Account Security page, click “See all connections” | Windows, macOS, Web |
| 3-4 | Identify the app and review its data access scopes | Windows, macOS, Web |
| 5-6 | Click Remove Access / Delete all connections, check for duplicates | Windows, macOS, Web |
| Extra | Remove or restrict the extension in chrome://extensions | Windows, macOS |