title: "Sensitive scopes you submitted for review aren't the same as the scopes that your app requests" React Native Google Fit
body: <p>I submitted my app for review that is using Android Google Fit API. I got the following response from Google.</p>
  <blockquote>
  <p>Hi,</p>
  <p>Thanks for applying for OAuth App verification your response reaching
  out.</p>
  <p>We noticed that the sensitive scopes you submitted for review aren't
  the same as the scopes that your app requests:</p>
  <p><strong>Scopes Submitted for Review​</strong></p>
  <p><a href="https://www.googleapis.com/auth/fitness.activity.read" rel="nofollow noreferrer">https://www.googleapis.com/auth/fitness.activity.read</a></p>
  <p><a href="https://www.googleapis.com/auth/fitness.activity.write" rel="nofollow noreferrer">https://www.googleapis.com/auth/fitness.activity.write</a></p>
  <p><strong>Requested by your App</strong></p>
  <p><a href="https://www.googleapis.com/auth/fitness.activity.read" rel="nofollow noreferrer">https://www.googleapis.com/auth/fitness.activity.read</a></p>
  <p>with the verification process, please update either of the following:</p>
  <p>The request for scopes in your app's codebase so that the scopes
  requested by your app match the scopes {in your Console/in review} or
  The scopes you submitted for review using the scope picker in your
  Console. If you're adding scopes to your Google Cloud project, make
  sure you provide a detailed Scope Justification for each additional
  scope you submit for review. You can find more information in the
  OAuth Application Verification FAQ. If you have other questions,
  please reply to this email to continue</p>
  </blockquote>
  <p>Thing is in GCP I clearly only request read access:</p>
  <p><a href="https://i.stack.imgur.com/rabPf.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/rabPf.png" alt="sensitive scopes img in GCP" /></a></p>
  <p>And then using React-Native-Google-Fit library in code I request:</p>
  <pre><code> const options = {
       scopes: [Scopes.FITNESS_ACTIVITY_READ, Scopes.FITNESS_LOCATION_READ],
   };
  
   const authResponse = await GoogleFit.authorize(options);
  </code></pre>
  <p>Where does Google get the idea that I'm requesting write access? How do I fix this? I only need to read the exercises from Google Fit.</p>