A new study found that many AI-powered Chrome extensions require deep browser access and collect user data in ways most people aren’t fully aware of. Researchers analyzed 442 AI extensions and found more than half collected some form of user data—including personal communications, website content and activity patterns—while requesting powerful permissions like scripting and active tab access.
Among the most widely used tools, Grammarly and QuillBot ranked high for potential privacy impact due to their broad access and extensive data collection practices—even though third-party risk scores didn’t flag them as actively malicious.
Because extensions can read and interact with web pages in real time, they may see things users assume are private—emails, internal dashboards, cloud apps, or collaboration platforms—raising the bar on what “permission granted” actually means.
This isn’t just about fringe tools. Popular writing assistants and productivity helpers are included, which means everyday users might be exposing more than they realize just by installing what seem like harmless browser helpers.
On a related front, recent discussions about messaging apps like WhatsApp have also reignited privacy debates. While WhatsApp insists it cannot see your private chats thanks to end-to-end encryption, lawsuits and public scrutiny continue to fuel confusion about what data platforms actually have access to.
Takeaway:
• Always check the permissions before installing an extension.
• Look for tools that minimize data collection and don’t require scripting or broad page access.
• Keep browsers and extensions up to date—and remove those you don’t actively use.
Privacy isn’t just a feature; it’s a choice you make with every install.