Pokémon GO has taken America and other countries by storm – but may have led millions of iPhone users to inadvertently give away access to their Google account, according to reports. Experts have warned that iOS users of Pokémon GO are putting themselves at risk by signing up using Google, as the game requests access to all of their information – from e-mail to search history.

Niantic, the maker of the game, recently apologised over the security gaffe, and admitted it was a programming mistake as it released an updated version fixing the issue.

‘We recently discovered that the Pokémon GO account creation process on iOS erroneously requests full access permission for the user’s Google account,” the firm has said. ‘However, Pokémon GO only accesses basic Google profile information (specifically, your user ID and e-mail address) and no other Google account information is or has been accessed or collected.

The firm is also working with Google on a fix, it confirmed. “Google has verified that no other information has been received or accessed by Pokémon GO or Niantic. Google will soon reduce Pokémon GO’s permission to only the basic profile data that Pokémon GO needs, and users do not need to take any actions themselves.”