Malwarebytes vs Bitwarden

Malwarebytes has noticeably better specific privacy practices than comparable US security companies — IP addresses are explicitly not stored, the VPN has a detailed and specific no-logs commitment, text messages are scanned without being retained, cloud storage scan files are deleted immediately after scanning, and usage/threat statistics collection can be opted out of in product settings — but it is a US company (Santa Clara, CA) with no named security certifications in its policy, vague retention periods, and a website advertising tracking stack.

Bitwarden is an open source password manager that encrypts your vault on-device so it cannot read your passwords — but it uses Google Analytics on both the website and service, is a US company subject to FTC jurisdiction and government requests, collects meaningful amounts of administrative data for marketing and product improvement, and uses legitimate interest as a legal basis for several secondary data uses.