Avast and AVG collect and sell your browsing history: What you need to know

Avast logo on a building at night.
Avast's headquarters in Prague. (Image credit: BalkansCat/Shutterstock)

If you're getting something valuable for free, you're often the product. This applies to antivirus software as much as to anything else.

We've known for a few years that Avast Free Antivirus and AVG AntiVirus Free collect your browsing data and share it with third parties. That's true whether or not you installed Avast and AVG's browser extensions or secure browsers, and we have made that clear in our reviews of the products.

Avast and AVG have recently added a clearer user opt-out to prevent such data collection, although it was always possible to do so from the antivirus software's settings. If this type of data collection troubles you, please check out our roundup of the best free antivirus software.

Paying for something that's free

This is in the news due to a joint investigation by PC Magazine and Vice Motherboard, which dug into the process by which Avast Software collects and monetizes aggregated user data and posted the results today (Jan. 27).

The two stories imply that Avast and AVG's browser-history collection is secret. In fact, Avast has been fairly transparent that it collects this kind of data. Its then-CEO went so far as to detail Avast's collection software, Jumpshot, in a 2015 blog post.

Here's a screenshot from Avast Free Antivirus, collected in mid-2018, that informs the user of data collection, although it doesn't specify browsing data. 

Avast dialogue box advising user of data collection.

(Image credit: Future)

To get the details of what was collected, included browsing history, you had to go to Avast and AVG's Privacy Policy, and to opt out, you had to go into the settings.

This convoluted process has been replaced by a better, clearer message that looks like this.

Avast dialogue box informing the user of data collection.

(Image credit: Avast Software/Screenshot by PC Magazine)

"If you allow it, we'll provide our subsidiary Jumpshot Inc. with a stripped and de-identified data set derived from your browsing history for the purposes of enabling Jumpshot to analyze markets and business trends and gather other valuable insights," the dialogue box states. 

We ran both the Avast Free Antivirus and AVG AntiVirus Free installers and were presented with that dialogue box either during or shortly after installation. 

(We had earlier unchecked two lines on the main installer that had been checked by default: "Yes, install Avast [or AVG] Secure Browser" and "Make AVG [or Avast] Secure Browser my default browser". You should do the same.)

The risks of de-anonymization

Vice and PC Mag also found that the collected data can be fairly easily de-anonymized in some instances. They implied that enough information was transmitted to the end recipient of the data to be able to figure out, for example, who had bought a specific item on Amazon at a given time.

Unfortunately, that is a fairly commonplace occurrence with such data, no matter who collects it. For example, it's neither hard nor expensive to track individuals by collecting geolocation data from mobile ads. Still, it's another reason to opt out of Avast and AVG's data collection.

In an earlier email responding to Tom's Guide's questions, an Avast spokeswoman told us that the dialogue box first began to appear for new users in July 2019, and that it will begin to appear for existing users in February 2020. 

We're glad to see that Avast and AVG are being more transparent about what's going on when you install their free antivirus software. We've asked an Avast spokesperson if there's any other kind of user data that's collected and passed on to third parties and will update this story once we receive a reply.

TOPICS
Paul Wagenseil

Paul Wagenseil is a senior editor at Tom's Guide focused on security and privacy. He has also been a dishwasher, fry cook, long-haul driver, code monkey and video editor. He's been rooting around in the information-security space for more than 15 years at FoxNews.com, SecurityNewsDaily, TechNewsDaily and Tom's Guide, has presented talks at the ShmooCon, DerbyCon and BSides Las Vegas hacker conferences, shown up in random TV news spots and even moderated a panel discussion at the CEDIA home-technology conference. You can follow his rants on Twitter at @snd_wagenseil.

Latest in Antivirus
A woman using her laptop securely with a cup of coffee in hand
5 common mistakes people make when shopping for antivirus software
Best antivirus software
How does antivirus software work?
Avast software on a webpage
FTC rules Avast customers entitled to $16.5 million settlement — how to claim your share
A laptop with the screen displaying both the logos for Norton antivirus and McAfee antivirus softwares.
I compared Norton vs McAfee’s antivirus software to see which one is best
Bitdefender and Norton logo split a computer screen
I put Bitdefender vs Norton antivirus through a 7-round face-off — here's the winner
Norton 360 Standard (for Mac)
Norton 360 Deluxe is 75% off in this Black Friday deal — protect 5 PCs, Macs tablets or phones for just $30
Latest in News
NYTimes Connections
NYT Connections today hints and answers — Tuesday, March 18 (#646)
A person on a laptop converting a PDF to a DOC
FBI issues warning over free online file converters that infect your PC with malware
The Find my People feature
Android Find My can now track your friends and family — here's how to use it
Foldable iPhone concept image
Are you sitting down? Here’s what the foldable iPhone could cost
Samsung HW-Q990D soundbar
Samsung’s flagship 2024 soundbar just got bricked by a new firmware update — don’t update
A hacker typing quickly on a keyboard
New MassJacker malware is hijacking digital wallets to steal large sums from users