Alphabet Inc’s Google gave details about its policies for third-party Gmail add-ons but stopped short of fully addressing questions from U.S. senators about developers who break its email-scanning rules.

How user data flows between big technology platforms such as Google and Facebook Inc and their partners has faced scrutiny around the world this year since Facebook revealed it had done little to monitor such relationships.
Google said in a letter to U.S. senators that it relies on automated scans and reports from security researchers to monitor add-ons after launch, but did not respond to lawmakers’ request to say how many have been caught violating the company’s policies.

Senators may seek further clarity on Gmail’s operations at a Commerce Committee hearing about privacy practices scheduled for Sept. 26 with officials from Google, Apple Inc, AT&T Inc and Twitter Inc.

Gmail users must give their consent to activate extensions, which can help them send emails on a time delay, get price-match rebates from retailers and remove unwanted mailing lists.

Under Google’s policies, software firms that create these add-ons must inform users about how they collect and share Gmail data. The lawmakers’ inquiry came after the Wall Street Journal reported in July that some add-on makers did not make clear to users that their employees could review Gmail messages and that their data could be shared with additional parties.

Google told senators it has suspended apps due to “a lack of transparency to users,” without identifying violators or when enforcement actions took place. Gmail, used by 1.4 billion people, is not the only Google service drawing lawmaker questions about oversight.

The lawmakers cited media reports and said there had been suggestions that third-party applications have access to and use this non-triggered data without disclosure to users.