NordVPN vs 1Password

NordVPN genuinely doesn't log your VPN activity — that part of the privacy pitch holds up — but outside the tunnel it runs a large advertising and analytics infrastructure full of US-based trackers, shares data within a broad corporate group, markets to you for a year after you cancel, and retains billing records for a decade.

1Password can never read your saved passwords — they're end-to-end encrypted and even 1Password holds no keys — but outside the vault, the company collects substantial usage and diagnostic data, shares information with advertising partners in ways that may legally count as a data sale, and applies vague retention language to everything that isn't your vault content.