Is Scope Health safe?

Medium risk

Scope Health lets its sidebar capture EHR page HTML, form fields, and matched API traffic on supported EHR sites.

On supported EHR pages, the extension injects telemetry that monitors configured fetch and XHR calls and records URLs, methods, status, request bodies, and response bodies. The app.scopehealth.com sidebar iframe can request page HTML and visible form context, including field labels, current values, page title, URL, and nearby text.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

supportv1.1.6Chrome Web Store
40Risk
Who publishes it

support - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
support

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Scope Health contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • app.scopehealth.com

    Scope Health sends data to app.scopehealth.com. No other extension we have analysed sends data here.

Updated 30 September 2026gbkgdkndflidokjgmehlckachngnifem