Is OlaDev safe?

Clean risk

OlaDev sends deleted and view-once WhatsApp Web messages to its own backend for its CRM features.

On web.whatsapp.com the extension injects a script that captures messages when they are deleted or opened as view-once, and posts them to the vendor's API. When the webhook option is enabled, full message objects are also forwarded. The API address comes from a remote config fetched from the vendor's server.

0Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed OlaDev contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • apiexpress.ola.dev.br

    OlaDev sends data to apiexpress.ola.dev.br. No other extension we have analysed sends data here.

Updated 15 October 2026ccgekbggkmkhofollebcbbdkcmcgkmgd