Malwarebytes vs Keeper

Malwarebytes has noticeably better specific privacy practices than comparable US security companies — IP addresses are explicitly not stored, the VPN has a detailed and specific no-logs commitment, text messages are scanned without being retained, cloud storage scan files are deleted immediately after scanning, and usage/threat statistics collection can be opted out of in product settings — but it is a US company (Santa Clara, CA) with no named security certifications in its policy, vague retention periods, and a website advertising tracking stack.

Keeper is a zero-knowledge password manager with SOC 2, ISO 27001, and FedRAMP High certification — among the strongest independent security credentials of any password manager — and it cannot access your vault contents under any circumstances; the main caveats are that it is a US company (Chicago) hosted on AWS subject to US legal process, uses cookies and marketing tracking on its website, retains data for vaguely defined periods, and enterprise account admins can access usage and interaction data for employees on business plans.