Phia
Stanford / Two extension controversies: webpage-content logging and affiliate attribution; no criminal charge or civil complaint
Fortune reported that a prior Phia extension transmitted full-page HTML from users' browsing to company servers; months later, Bloomberg testing found that Phia opened background retailer tabs and replaced other referral codes to claim affiliate credit for purchases it did not drive . Phia said the earlier logging was anonymous, aggregate, and never stored, and removed the HTML feature. It called the later attribution behavior a bug affecting a subset of users, shipped a fix, and passed Bloomberg's retest. Researcher Ben Edelman disputes the “recent bug” framing, pointing to a feature shipped in December 2025; Impact.com suspended Phia pending review. No public charge, lawsuit, or finding of intentional fraud has been identified. Kianni is a 2023 30 Under 30 alum; Gates joined Forbes' 2026 Retail & E-Commerce list.
First it copied the page.
Then it claimed the sale.
Two separate reporting cycles. Two company fixes. One unresolved question: how much happened, for how long, and who knew? Public evidence establishes behavior and remediation—not founder intent or criminal liability.
Researchers replicated prior full-page HTML transmission. Bloomberg later replicated background affiliate attribution across 50+ sites. Impact.com suspended Phia.
Earlier logging was described as anonymous, aggregate, and never stored. Later attribution was described as a subset-of-users bug. Phia removed/fixed both behaviors; Bloomberg's retest passed.
Commission scale, data disposition, internal approval chain, leadership knowledge, affiliate clawbacks, and whether further network or regulator action will follow.
The seven-month dispute
FULL-PAGE HTML REPORT
Fortune reports an earlier extension version transmitted full-page HTML from visited pages. Phia said the checks were anonymous and aggregate, data was never stored, and the HTML feature was removed.
AUTO_DROP SHIPS
Ben Edelman says the disputed affiliate behavior first appeared in version 1.9.33 and persisted across releases for roughly seven months.
TEST, NOTICE, FIX, RETEST
Bloomberg tests more than 50 retail sites, contacts Phia, then confirms the automatic attribution behavior stopped after Phia's overnight fix.
IMPACT.COM SUSPENSION
TechCrunch reports affiliate platform Impact.com suspended Phia while reviewing the reported behavior.
CURRENT STORE DISCLOSURE
Chrome's listing shows version 1.10.37 and declares handling web history, website content, authentication information, and personally identifiable information.
The outrage outran the evidence
Dominant framing is “fraud” and nepo-baby ridicule. Strongest counterpoint: reporting establishes product behavior, not either founder's personal knowledge or intent. Metrics are dated snapshots, not evidence.