According to a Wall Street Journal report, Google allows third-party apps to scan the emails of some Gmail users and does little to police the developers that gain access to inboxes by offering email-based services such as price comparisons or other tools.

Google said it vets all the apps that request access to Gmail accounts and only grants access with the explicit consent of users, CBSnews reported.

The app companies who read people’s emails say that their actions are covered by their user agreements. Google also defends the practice by saying it gets permission from users before allowing third-party applications to connect to an account. This is seen in a pop-up box that includes a note that the app wants permission to “read, send, delete and manage your email.”

The revelation comes a year after Google announced it would stop scanning Gmail inboxes for information to personalize advertisements, claiming it wanted users to “remain confident that Google will keep privacy and security paramount.”