Chromium browsers found sending user data to Google, raising privacy & regulatory concerns

Chromium-based browsers like Google Chrome, Microsoft Edge, Opera, and Brave have been discovered sending user information to Google through a preinstalled extension named "hangout_services." (Notably, Brave has announced the extension is currently disabled by default and will be removed in a future update). This extension transmits data including CPU and GPU usage, memory usage, detailed processor information, and logs of user visits to Google domains. The APIs used for this data transfer are exclusive to Google's sites, potentially giving Google services such as Google Meet an advantage by optimizing system performance for video and audio capabilities.

Non-Chromium browsers like Mozilla Firefox do not contain this extension, which may impact their performance on Google sites. Google defends the extension as a means to enhance user experience and report performance issues. They also claim that limiting the API to their domains is a security measure to prevent third-party misuse.

The European Commission, already investigating Google for potential Digital Markets Act (DMA) violations, may look into this API usage more closely. The unauthorized collection of user data raises privacy concerns and could be considered a DMA violation. The EU's pursuit of digital sovereignty might be compromised by this data transfer to a US-based company, potentially leading to significant consequences for Google if found in violation.

Our take: Edit: added Brave's statement