But I don't think that will allow you to get past the 100 install limit, without going through the verification/security assessment. If you don't need a security assessment, then the verification won't cost you anything. The only way to get restricted access to the users data is to use a restricted scope, unless your app could somehow run code owned by the user, and get a return. The user would need to set up a Web App on their account and give your app the published link.