Is GMB Everywhere - GBP Audit for Local SEO safe?

Medium risk

GMB Everywhere is medium risk. Local Scan sends scraped Maps listings plus the page URL to data.gmbeverywhere.com in one POST. Maps encodes the search query into the URL, so it goes too, per a planted marker test. The searchTerm field is stale, always empty.

https://www.GMBEverywhere.comv5.8.0Chrome Web Store
45Risk
Who publishes it

Upwards Company Inc. - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
https://www.GMBEverywhere.com
Declared legal entity
Upwards Company Inc.
Registered address
2233 Argentia Rd, #302A, Mississauga, ON L5N 2X7, CA

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

SeverityMEDIUM
ClassUNWANTED
TypeUnexpected
CWECWE-359
SourceAI SANDBOX

Maps search terms leave your browser via the search-results URL

Local Scan sends scraped Maps listings plus the page URL to data.gmbeverywhere.com in one POST.

Maps encodes the search query into the URL, so it goes too, per a planted marker test.

The searchTerm field is stale, always empty.

01EvidenceCAUSE EFFECT
What actually happens
You did this

You search Google Maps and click the extension's Local Scan button on the results page.

The search term becomes part of the Google Maps results-page URL, e.g. /maps/search/pizza+near+me/.

The extension did this

The extension sends the full page URL, together with scraped business data, to data.gmbeverywhere.com.

The URL and the search term embedded in it are not stripped or filtered before the request is sent.

02EvidenceFIELD TABLE
What the Local Scan request sends
FieldValueWhy it matters
Current Maps page URL
https://www.google.com/maps/search/pizza+near+me/@40.7580,-73.9855,14zContains your search query as part of the URL path, plus your approximate map coordinates.
Scraped business listings
[{"businessName":"The Tides Pizzeria","address":["21 Ferry Rd","Shoreham-by-Sea","BN43 5RA"],"rating":4.4,"reviews":203}]The name, address, rating, price range, and review counts for each business visible in your search results.
Request unique_code
8c5c3950-e2ef-4672-bc99-0433a045d46cA random ID the vendor's backend uses to key this specific submission.
03EvidenceNETWORK CAPTURE
Captured request
POSThttps://data.gmbeverywhere.com/xano/save-temporary-data-to-store
200 OK
Headers
Content-Typeapplication/json
Body
{
  "unique_code": "8c5c3950-e2ef-4672-bc99-0433a045d46c",
  "data": "{\"url\":\"https://www.google.com/maps/search/pizza+near+me/@40.7580,-73.9855,14z/data=!3m1!4b1?entry=ttu\",\"rawData\":[{\"rawdata\":[\"JDaUapvMFPeYhbIPr7LF8A0\",\"0ahUKEwib7o-5wMiWAxV3TEEAHS9ZEd4Q8BcIAigA\",[\"21 Ferry Rd\",\"Shoreham-by-Sea\",\"BN43 5RA\"],null,[null,null,\"£10–20\",[\"https://search.google.com/local/reviews?placeid=ChIJmUg05DCbdUgRbpSkpAxDN6w\",\"203 reviews\"],null,null,null,4.4,203],\"The Tides Pizzeria\"],\"businessName\":\"The Tides Pizzeria\",\"rank\":1}]}",
  "feature_type": "basic-audit"
}
04EvidenceTHIRD PARTY LIST
Where the data goes
  • data.gmbeverywhere.com

    Vendor (GMB Everywhere / gmbeverywhere.com) backend endpoint (Xano-hosted) that receives Local Scan submissions, including the page URL and scraped listing data.

Updated 30 September 2026oibcaeeplepnjfjhokfcabnaafodppik