Why does the app needs "email access" permissions?
Profile Visibilities
Starting June 2019, Atlassian Cloud supports Profile Visibility Controls, which allows all Jira Cloud users to limit the visibility of their private data. This includes things like profile image, name, location and also your email address.
You can check your own profile visibility settings here.
Why do we need this permission?
Outlook Email for Jira relies heavily on matching email addresses in Outlook with the corresponding Jira users.
Just one example: when creating a new issue, we match the email address of the sender to the Jira user and fill it as a reporter.
To support these use-cases, Atlassian introduced a new API and a new app scope called Access Email Addresses and introduced guidelines for their use.
Email addresses received via these APIs will exclusively used to provide the app features.
We never use them for marketing purposes and we never store them outside of Jira.