Is Clinical Notes AI safe?

Clean risk

Clinical Notes AI registers each page URL and domain as PostHog properties from its broad content script.

The content script runs on nearly every site and registers the current full URL and hostname with PostHog at p.clinicalnotesai.com. When a Clinical Notes AI user is signed in, the same bundle identifies the user by email and name, so later analytics traffic can include the current page URL/domain alongside that account data.

Clinical Notes AIv0.9.13Chrome Web Store
0Risk
Who publishes it

Clinical Notes AI, Inc - no other listings under this identity, 1 shared hostname

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Clinical Notes AI
Declared legal entity
Clinical Notes AI, Inc
Registered address
651 North Broad Street, Ste. 201, Middletown, DE 19709, US
Registered contact
Elijah Lipsky

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

ehr2.charmtracker.com
Also called by 2 other listings, including Comprehend EMR Integration

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Clinical Notes AI contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • p.clinicalnotesai.com

    Clinical Notes AI sends data to p.clinicalnotesai.com. No other extension we have analysed sends data here.

Updated 30 September 2026epehnbnhpgdckdeiclihbcoihhjnmicf