Good question. This is not implemented. However, it isn't implemented for a reason: organice is a front-end application, there is no back-end and no monitoring

Good question. This is not implemented. However, it isn't implemented for a reason: organice is a front-end application, there is no back-end and no monitoring whatsoever. So, when you login to Dropbox, only your browser will have access to your Dropbox. So, from a security perspective, you're not giving too much access to a server - your data cannot be seen by anyone else but you. The synchronization code for Dropbox is also pretty straight forward and can easily be reviewed, it's less than 200LOC: https://github.com/200ok-ch/organice/blob/master/src/sync_backend_clients/dropbox_sync_backend_client.js https://github.com/200ok-ch/organice/blob/master/src/sync_ba... I hope that answers your question. If there's a reason to limit access that I'm missing, I'd be happy to get a response^^