Chrome Web Store
25Versions
1Code reviewed

No malware found

In code review (v0.0.37)

Our reviewer read version 0.0.37 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

Fathom AI Note Taker for Google Meet, used by 600,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 1 finding (1 medium), led by unauthorized data collection. Its permissions mean it can observe network requests.

Key findings

  • medium· unauthorized data collection —The extension sends the user's email address and Chrome profile ID to Sentry (third-party error tracking service) without declaring any data collection in the CWS listing. This constitutes unauthorized transmission of personally identifiable information to a third party.

The extension is a legitimate meeting recording assistant. The code sends user email and ID to Sentry (a third-party error tracking service) without disclosure in the CWS listing, which is a privacy concern but not malicious. All other network requests go to the publisher's own domain (fathom.video) for the extension's core functionality. The ML model's low risk score (0.00) aligns with the benign nature; the risk-engine's critical rating is primarily due to broad permissions (webRequest, identity) that are used appropriately for meeting detection and authentication.

Fathom AI Note Taker for Google Meet

Fathom AI Note Taker for Google Meet

ID: nhocmlminaplaendbabmoemehbpgdemn

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
0.2.13
Size
0.29 MB
Rating
4.9/5
Reviews
1,700
Users
600,000
Type
Extension
Updated
Sep 18, 2026
Category
Communication
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
fathom.videoView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
600,000

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6
Screenshot 7
Screenshot 8
Screenshot 9
Screenshot 10

Install growth

Item
Type
Severity
Description
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
identity.email
Permission
High
This permission directly accesses the user's email address. Rated High because it reveals personally identifiable information and can be used for tracking or targeting.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk: • 19% increase: Access to sensitive domains increases potential impact • 10% increase: Early script execution enables pre-emptive content manipulation
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
system.cpu
Permission
Medium
This permission provides access to CPU usage and information. Rated Medium because it can monitor system performance, detect other applications, and potentially identify user activities.
system.memory
Permission
Medium
This permission accesses system memory information. Rated Medium because it can monitor memory usage patterns, detect other applications, and gather system state information.
https://fathom.video/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.zoom.us/s/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.zoom.us/j/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.zoomdev.us/s/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.zoomdev.us/j/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.zoomgov.com/s/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.zoomgov.com/j/*
Host
Medium
Host permission — access limited to this URL pattern.
https://meet.google.com/*-*-*
Host
Medium
Host permission — access limited to this URL pattern.
https://teams.live.com/meet/*
Host
Medium
Host permission — access limited to this URL pattern.
https://teams.microsoft.com/l/meetup-join/*
Host
Medium
Host permission — access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: https://meet.google.com/*-*-*
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

Records, transcribes & summarizes meetings FREE

Read the publisher’s full description

Install this Fathom for Google Meet Chrome extension to unlock: * Ability to use Fathom on any Google Meet - without it you have to make sure to join the meeting from the Fathom desktop app * No more looking for the desktop app - Fathom recording controls embedded directly in Google Meet ABOUT FATHOM Fathom records, transcribes, and summarizes your Zoom, Google Meet, or Microsoft Teams meetings so you can focus on the conversation instead of taking notes! 🆓 Fathom is completely FREE to use! Get setup in a matter of minutes. 🥇 #1 Rated AI Meeting Assistant on G2 with a perfect 5/5 rating. Read our reviews: https://www.g2.com/categories/ai-meeting-assistants KEY FEATURES: 💥 Instant Access to Fully Transcribed & Highlighted Recordings No more waiting after your calls for the recording! Jump directly to highlights & action items. 🤖 Auto-Generated Call Summaries Turn a 30 min call into a 1 min read! Copy your summaries into Google Doc, Notion, or Word with a single click. 🔥 Updates Salesforce & Hubspot Automatically No more post-call data entry! Fathom will log your call and its summary into your CRM. 🙏 Easily Share Highlights Show don't tell! Fathom makes it easy to share key passages of your customer calls or meetings with colleagues. 🔍 Search Across Calls & Transcripts Getting on a follow-up call and don’t remember where you left off? Boss asking you if anyone’s brought up a certain competitor recently? Fathom’s got you covered.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

No network indicators were extracted from this version.

Showing 1 to 10 of 30 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Communication