Is it safe to connect Search Console to a mobile app?

Connecting a Search Console app means granting it access to your Google account’s Search Console data. QueryWatch uses Google’s own sign-in sheet with read-only scopes, so it can read your reports but not change your properties. On iPhone the refresh token stays in the Keychain, and a credential leaves the phone only if you turn on push alerts.

What can QueryWatch access?

Scope	What it allows	When it is asked for
openid, userinfo.email	Identify which Google account signed in	At sign-in
webmasters.readonly	Read Search Console data	At sign-in
Write scope	Submit or delete a sitemap	Only when a Pro user does that

Where does the token live?

On iPhone the refresh token stays in the Keychain. On Android, Google Play services hold the grant and the app never receives a refresh token. For more detail, read where your Google token goes.

What changes if I turn on alerts?

Alerts are computed by the developer’s own relay server in Germany every six hours. For that to work a credential leaves the phone, which is why alerts are opt-in. The rule compares the latest complete day with the same weekday over the previous four weeks, fires at a 30 percent change or two standard deviations, and sends at most one notification per property per day. Each alert stores an evidence snapshot of what it saw.

How can I check before signing in?

Demo Mode runs the whole app, including Pro screens, on four sample properties without signing in. You can also remove access at any time from your Google account’s connected-apps page, and the delete my data page explains how to ask for stored data to be removed. Support is at the address listed on the support page.

For the full feature list, see the product page. QueryWatch is independent and not affiliated with Google.