AVG - going from Anti Virus software towards Spyware.

In case you have AVG installed, you will notice that starting October the 15th you'll get a popup, indicating that AVG anti-virus software now collect and sell browser and search history data and well, what not ? Also getting tired of all the companies tracking you and selling your data these days ?

Security firm AVG can sell search and browser history data to advertisers in order to "make money" from its free antivirus software, a change to its privacy policy has confirmed.

Under the heading "What do you collect that cannot identify me?" the policy reads:

We collect non-personal data to make money from our free offerings so we can keep them free, including:

• Advertising ID associated with your device;
• Browsing and search history, including meta data;
• Internet service provider or mobile network you use to connect to our products; and
• Information regarding other applications you may have on your device and how they are used.

Sometimes browsing history or search history contains terms that might identify you. If we become aware that part of your browsing history might identify you, we will treat that portion of your history as personal data, and will anonymize this information.

The updated policy explained that AVG was allowed to collect "non-personal data", which could then be sold to third parties. The new privacy policy comes into effect on 15 October, but AVG explained that the ability to collect search history data had also been included in previous privacy policies, albeit with different wording.

AVG's potential ability to collect and sell browser and search history data placed the company "squarely into the category of spyware", according to Alexander Hanff security expert and chief executive of Think Privacy.

"Antivirus software runs on our devices with elevated privileges so it can detect and block malware, adware, spyware and other threats,". "It is utterly unethical to [the] highest degree and a complete and total abuse of the trust we give our security software." Hanff urged people using AVG's free antivirus to "immediately uninstall the product and find an alternative".

Previous versions of AVG's privacy policy stated it could collect data on "the words you search", but didn't make it clear that browser history data could also be collected and sold to third parties. In a statement AVG said it had updated its privacy policy to be more transparent about how it could collect and use customer data.

An AVG spokesperson explained that any non-personal data it collected and potentially sold to advertisers would be cleaned and anonymised, making it impossible to link it back to individual users. "Many companies do this type of collection every day and do not tell their users," the spokesperson said.

"While AVG has not utilised data models to date, we may, in the future, provided that it is anonymous, non-personal data"
AVG spokesperson
An AVG spokesperson told WIRED that in order to continue offering free security software the company may in the future "employ a variety of means, including subscription, ads and data models."

"Those users who do not want us to use non-personal data in this way will be able to turn it off, without any decrease in the functionality our apps will provide," the spokesperson added. "While AVG has not utilised data models to date, we may, in the future, provided that it is anonymous, non-personal data, and we are confident that our users have sufficient information and control to make an informed choice."

According to Nigel Hawthorn, European spokesperson for cloud security firm Skyhigh Networks, AVG had stayed "just on the non-creepy side of creepy". "If something is free you've got to assume that you're the product," he said. "The difficulty with this is whether anyone notices, reads it, checks it and understands the implications".

"It is utterly unethical to the highest degree and a complete and total abuse of the trust we give our security software"
Alexander Hanff, chief executive, Think Privacy
AVG is the third most popular antivirus product in the world according to market analysis from software firm Opswat. The company has a 8.6 percent share of the global market, behind Microsoft on 19.4 percent and Avast on 21.4 percent. In its privacy policy, Avast, which also provides free security software, explains that it is able to collect certain non-personal information and sell it to advertisers. The company does not specify that this includes browser and search history data.