Does Antivirus Software Collect Your Data?

CNET

09-05-2025

We count on antivirus software to keep our devices and personal data safe from cyber threats. But some of that software may be collecting data about you while it protects you.
That's the concern raised in a 2023 report by AV-Comparatives, an independent testing lab that evaluated how 20 of the most popular antivirus programs handle user data. The study looked at what data these products collect, how much control users have over it, and whether that data is shared with third parties. It also considered how easy companies' data policies are to understand and how transparent they are about these policies.
The takeaway? Antivirus tools do their job, but many gather more data than most people realize. Here's what you need to know.
Read more: Best Antivirus Software for Maximum Protection in 2025
What data is my antivirus software collecting?
Antivirus software must know some things about your system to keep it safe. But in many cases, it collects more information than it needs.
The AV-Comparatives report found that most antivirus programs gather a mix of system info, network details, user data and file-related information. That includes basics like your operating system version, how much RAM you have, your CPU type and even your computer's name. Some go further, collecting BIOS info, a list of installed apps, or details about running processes.
They also pull in network data, such as your local and external IP addresses, DNS server and network name. This helps them spot potential threats, but it also gives them a clear picture of where and how you connect.
User data is where things start to feel more personal. About half of the products in the study send your Windows username to the company. Depending on your setup, that could be your full name. Time zone, language and general location info are also collected. And if your antivirus includes web protection, it might track every URL you visit, the previous URL you came from and the site's IP address.
Then there's the stuff on your computer. Antivirus software often uploads file names, locations and hashes when scanning something suspicious. But in some cases, it also sends entire files -- including harmless ones like documents -- without asking first.
That could be a problem.
Is my antivirus software sharing my data with others?
Let's say your antivirus software collected your data for legitimate reasons. What it does with that data matters.
According to the AV-Comparatives report, some antivirus companies are pretty responsible when it comes to how they handle your data. Others, not so much.
F-Secure, G Data and K7 were among the top performers when it comes to data collection and sharing practises. Norton, Panda and McAfee, however, scored poorly for how they share user data.
AV-Comparatives
Now, to be fair, not all data sharing is bad. Some of it helps improve malware detection. For example, many antivirus programs send suspicious files or file hashes to services like VirusTotal, where different security companies work together to identify threats. That kind of collaboration makes sense and helps keep everyone safer.
But not every company draws the line in the right place. AVG, which was later acquired by Avast, collected users' browsing history and sold it to third-party advertisers. The FTC eventually banned Avast in June 2024 from selling or licensing users' web-browsing data and fined it $16.5 million. Not exactly the kind of behavior you want from software that's supposed to be guarding your privacy.
Some antivirus tools are clearer than others about what's going on behind the scenes. If privacy matters to you, it's worth digging into these details before hitting install.
How can I stop my antivirus software from collecting and sharing my data?
In a perfect world, antivirus software would only collect and share data that was absolutely necessary. Since that's not the world we live in, you'll need to be proactive in protecting yourself. Here's how.
Go into your settings
Most antivirus programs have options tucked away in their menus that let you opt out of things like:
Usage tracking
Cloud analysis
Uploading suspicious files
Logging the websites you visit
These features are often turned on by default, so it's worth spending a couple of minutes poking around and turning off anything you don't want running in the background. If you're not sure what's being shared right now, you can always disable the antivirus first and review the options later.
Slow down when installing
Many people fly through the software setup process without realizing they're agreeing to send all kinds of data. Look for any checkboxes related to product improvement or data sharing and uncheck them if you'd rather not participate.
Avoid free antivirus software
Free antivirus tools can be tempting, but they need to make money somehow. That sometimes means collecting and selling user data. If you care about privacy, it's usually safer to go with a paid version from a vendor that's more upfront about how it handles your info.
Pick a privacy-conscious vendor
In the AV-Comparatives report, F-Secure, ESET and G Data all scored well for how they handle and share data. Avoid the software that didn't do so well.
Actually read the privacy policy
Yeah, we know. It's not the most fun thing to read, but the privacy policy and end-user license agreement will usually tell you what kind of data is collected and what the company does with it. Some vendors even have simplified versions or FAQs that make things easier to understand.
Here are a few you can check out:
Should I be worried about having antivirus software installed for security reasons?
It's fair to worry about how much data antivirus software collects, but that doesn't mean you should ditch it altogether.
Antivirus is still one of the most important tools you can have to protect yourself from malware, phishing attacks and all the other junk floating around online. Yes, some programs grab more data than they probably need, but most use it to improve security, not to spy on you.
The key is picking antivirus software that's upfront about what it collects and gives you some control over it. Plenty of great options offer solid protection without going overboard on data collection.
So yes, it's smart to be cautious, but going without antivirus software leaves you way more exposed than using a well-reviewed one that respects your privacy.