.png?token=eyJraWQiOiJzdG9yYWdlLXVybC1zaWduaW5nLWtleV80NzQxMTM1Ny0yOWQ5LTRjYjctYTQ2ZS1iMWRhZTM5MGQxNjQiLCJhbGciOiJIUzI1NiJ9.eyJ1cmwiOiJXZWJzaXRlIEFzc2V0cy9jbGFyaXR5LWluYm94LWxvZ28tKGRhcmstaGlyZXMpLnBuZyIsImlhdCI6MTc3MDY2MjMyOSwiZXhwIjo0ODkyNzI2MzI5fQ.l97-jsT-3RFJHPguXJZtFfhnzBNV69xS0XwfvOXYci0){kind=logo}
How to Revoke an App's Access to Your Mailbox
Worth knowing before you connect anything, not after. Two minutes, and it is the same procedure for every app you have ever authorised.
Revoking access, step by step
- 1Google: open myaccount.google.com/connections. Every app holding a token is listed there, including ones you authorised years ago and forgot.
- 2Select the app, open See details, then Remove access, and confirm. The token dies immediately — the app's next API call fails.
- 3Microsoft personal accounts: open account.live.com/consent/Manage, find the app, and choose Remove these permissions.
- 4Microsoft work or school accounts: myapps.microsoft.com lists your apps, but your tenant admin may control removal. If the app was admin-consented, only an admin can revoke it in Entra ID under Enterprise applications.
- 5Also revoke inside the app itself if it offers it. Removing the Google grant kills the token but leaves the app's own account and its stored data untouched.
- 6Then check what remains. Revocation stops future access. It does not delete anything the app already copied, and it does not remove labels, folders or drafts it created in your mailbox.
What that actually means
- •Changing your Google password does not revoke OAuth tokens — a common and wrong assumption
- •Labels and drafts an app created stay in your mailbox after you remove it; you delete those yourself
- •On a work account the Remove button may be absent, with no explanation that an admin holds the decision
- •Revoking does not trigger data deletion at the vendor — that is a separate request
Disconnecting Clarity specifically
- 1In the app: Settings, then disconnect the Gmail or Outlook integration. This stops the mailbox watch, stops the calendar watch channel if one exists, clears the stored access and refresh tokens, and marks the account disconnected.
- 2Then remove the grant at Google too, at myaccount.google.com/connections. Clarity's disconnect clears its own copy of the tokens; removing the grant at Google is what guarantees no token can be reissued.
- 3Your Clarity labels — 01. TO RESPOND through 08. MARKETING — remain in Gmail after disconnecting. Delete them in Gmail's label settings if you want them gone.
- 4Any unsent AI drafts remain in your Drafts folder. They are ordinary Gmail drafts and you delete them the ordinary way.
- 5Disconnecting does not delete email content Clarity has already stored. To have that removed, email support and ask — there is no self-serve deletion button in the product today, and that is a gap we would rather name than hide.
- 6Reconnecting later is a fresh OAuth consent. The old tokens are gone; you will see the scope screen again.
- ✓Disconnect is one click in Settings and takes effect immediately, not at the end of a billing period
- ✓The mailbox watch is stopped explicitly, so no further push notifications are delivered
- ✓What is left behind — labels, drafts, stored content — is listed rather than glossed over
- ✓The limit is stated plainly: stored data deletion is a support request, not a button
Who asks this
Anyone evaluating a trial
Wants the exit route confirmed before granting access, and it takes under two minutes.
Departing employee's manager
Needs every third-party grant on a leaver's mailbox removed, and the connections page is the single list to work from.
Annual security review
Clears out five forgotten apps still holding live tokens on a personal Google account.
Frequently asked questions
Does changing my Google password revoke app access?
No. OAuth refresh tokens survive a password change — that is by design, so you do not have to reauthorise every app when you rotate a password. Revoking access at myaccount.google.com/connections is the only thing that kills the token.
How quickly does revocation take effect?
Immediately. The refresh token is invalidated, and the app's next API call returns an authorisation error. There is no grace period and no cached window.
Will revoking delete my data at the vendor?
No, and this is the most common misunderstanding. Revoking ends access to your mailbox from that moment. Anything already copied stays on the vendor's systems until you separately ask for deletion under their policy or your data protection rights.
What happens to Clarity's labels and drafts if I disconnect?
They stay. The labels are ordinary Gmail labels and the drafts are ordinary Gmail drafts — Clarity created them in your mailbox, so they belong to your mailbox. Delete them from Gmail if you no longer want them.
Can I disconnect Calendar but keep Gmail connected?
Yes. They are separate grants, and there is a separate calendar disconnect. Note that the calendar grant rides on the same Google account, so disconnecting Gmail also ends calendar access.
Reference: Your Google account's connected apps
Related guides
Is It Safe to Connect Gmail to a Third-Party App?
What Gmail access a third-party app really gets, which scope to refuse, and what Clarity requests.
Gmail App Permissions Explained
Every Gmail OAuth scope in plain English, and the exact five Clarity requests.
Outlook App Permissions Explained
Microsoft Graph mail permissions in plain English, and the ones Clarity requests.
What it costs you
Roughly 9.1 hours a week
Estimate2.8 hrs of that we could cover
The rest stays yours — it is not repeatable.
106 hrs
a year, if the low end of the range holds
137
threads went quiet and nothing told you
Last 90 days · your own mail · illustrative figures
Clarity Inbox
Get your free inbox report
An interactive report on your last 90 days: where your hours actually went, what is still waiting on you, and how much of your email could run itself. Free, delivered in minutes.
Get my free reportTakes 2 minutes · No credit card · Nothing is sent without you