Looking in Google, in the security and app permissions section, I'm told the following:

what3words has access to:

Google Drive
View and manage your Google Drive apps

Basic account info
View your email address
See your personal info, including any personal info you've made publicly available

=====
So I have the option to rescind access, which is what I'm going to do.