Totally get your friend's concern. Google is kinda bad in that they bundle a bunch of permissions into one (i.e. - all data read and changed...etc); we only need a small subset of that, and we have a very strict privacy policy not seen in other extensions, but users usually don't dig into our policy and get scared by that dialogue (which is totally understandable and I would be too).