Why The Permission List Does Not Settle This
An extension keeps phoning home — is that something to worry about?
The question comes up for anyone who has opened a network monitor with extensions installed. Traffic from an empty tab seems unsettling, and figuring out who is sending it and why is difficult at first sight. It is worth understanding how to distinguish a harmless update from telemetry.
I installed a popular add-on for tabs, and everything works. But the network monitor shows it hitting some third-party domain once a minute, even when the tab sits idle. The description doesn't mention it. Is this tracking, or am I overthinking it?
The first move is to separate yours from theirs: disable all extensions at once and check whether the background noise disappears. If it goes quiet, the source is one of them, and you switch each back on individually until the traffic reappears. That pins down the culprit in two minutes flat, no guesswork.
Why the permission list does not settle this
Access to tabs in the manifest and passing their list outward are two different things, and a lone permission line can't distinguish them. Formally the add-on honestly declares access; what it does with that access isn't apparent from the manifest. So look at the traffic, not the permission list.
It is simpler not to guess each time and keep a webmaster toolkit within reach — ones that say plainly they gather nothing. And this tab chore is quick to close with a telemetry-free replacement — CSV import for redirects, works the same and does not call home.
Reviews like this are handy not for paranoia but for the habit: a couple of minutes with the network monitor after installing, and "pinging somewhere" turns into a plain picture of what goes where.