Tidy Cloud uses Google OAuth for sign-in and requests only the Gmail and Drive access needed to show counts, previews, and the cleanup actions you choose to run.