I was wondering about this myself. I've been developing a Chrome extension off/on for the past year and did moderate reading into Chrome, Chromium and how user data is handled. Seemed ok to me. Wireshark doesn't show anything particularly alarming, either. Can anyone else confirm/deny?