Is AppChat safe?

Low risk

AppChat sends deleted and view-once WhatsApp Web message contents to its own servers.

On web.whatsapp.com the extension keeps a copy of incoming messages. When a message is deleted or a view-once message arrives, it uploads the message body and chat ID to the vendor's API, and in webhook mode it forwards messages as well. The upload is gated by the vendor-account channel configuration, which is fetched from the vendor's config endpoint.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

15Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed AppChat contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • apiexpress.appchat.app

    AppChat sends data to apiexpress.appchat.app. No other extension we have analysed sends data here.

Updated 15 October 2026acpikimckmggnfoeekafhlkfefffephd