Malwarebytes vs Incogni

Malwarebytes has noticeably better specific privacy practices than comparable US security companies — IP addresses are explicitly not stored, the VPN has a detailed and specific no-logs commitment, text messages are scanned without being retained, cloud storage scan files are deleted immediately after scanning, and usage/threat statistics collection can be opted out of in product settings — but it is a US company (Santa Clara, CA) with no named security certifications in its policy, vague retention periods, and a website advertising tracking stack.

Incogni is a data broker removal service that must collect your most sensitive personal information — full name, date of birth, home address, phone numbers — to do its job, then stores that data with US cloud providers including Google BigQuery, retains customer support records for six years, and runs a marketing tracking stack via Tune Inc. and Mailchimp, which sits in real tension with its privacy-first brand.