Trust
Google App Verification Status
While we complete Google's verification review, tenants connecting Google Calendar for the first time will see a warning screen. Here's what's going on and what to do.
Current status: Under review
Submitted on 2026-05-07. Expected decision window: June 4 – June 18, 2026.
Why the warning appears
Google requires every app that accesses user data to go through a manual review when it requests "sensitive" or "restricted" scopes. Calendar event creation falls in the sensitive bucket. Until that review completes, Google shows an "unverified app" screen the first time a user authorizes OnCall — even though OnCall itself is the same code, run by the same company, regardless of verification state.
Verification is purely a Google-side label. It does not change what data we access (only the scopes we requested do), how we store it (encrypted at rest in our database), or how to revoke it.
What to do during the warning
- Click Advanced at the bottom-left of the warning screen.
- Click Go to OnCall (unsafe). The "unsafe" wording is Google's default copy for unverified apps.
- Continue with the OAuth consent screen as normal.
After review completes, this warning will not appear for any user.
What we asked Google for
auth/calendar.events— create, update, and delete calendar events on the calendar the tenant selects. We deliberately did not request the broaderauth/calendarscope.userinfo.emailanduserinfo.profile— so we know which Google account is connected.
Justification we provided to Google: OnCall is an AI receptionist that books appointments on behalf of small service businesses. Without write access to a calendar, the receptionist can only capture the request — not actually book the meeting, which is the core promise of the product.
Limits while we're under review
Google's pre-verification mode caps unverified apps at 100 user grants. We're well under that cap and verification is expected to land before we approach it. If you connect now, your authorization will continue to work after verification completes — you do not need to re-connect.
Related pages
- Security & Privacy — how we store OAuth tokens and what data we touch.
- Privacy Policy
- Terms of Service
- Revoke access from your Google account →
Questions
Email hello@castglobe.com. We answer within one business day.