Malwarebytes vs 1Password

Malwarebytes has noticeably better specific privacy practices than comparable US security companies — IP addresses are explicitly not stored, the VPN has a detailed and specific no-logs commitment, text messages are scanned without being retained, cloud storage scan files are deleted immediately after scanning, and usage/threat statistics collection can be opted out of in product settings — but it is a US company (Santa Clara, CA) with no named security certifications in its policy, vague retention periods, and a website advertising tracking stack.

1Password can never read your saved passwords — they're end-to-end encrypted and even 1Password holds no keys — but outside the vault, the company collects substantial usage and diagnostic data, shares information with advertising partners in ways that may legally count as a data sale, and applies vague retention language to everything that isn't your vault content.