Yikes, this is worrisome.

Generative AI assistants packaged up as browser extensions harvest personal data with minimal safeguards, researchers warn.

Some of these extensions may violate their own privacy commitments and potentially run afoul of US regulations, such as HIPAA and FERPA, by collecting and funneling away health and student data.

Via The Register

Looks like quite a bit is shared, even on pages that include “sensitive health or personal information, such as the web forms used to submit medical data or social security numbers.” Specific info includes:

• webpage content, often the full HTML DOM [document object model]
• user’s form inputs
• identifiers
• user prompts

Fortunately, researchers found “Perplexity to be the most privacy-friendly.”

Want to avoid all the hassle? Use a local AI solution.