NordVPN vs Bitwarden

NordVPN genuinely doesn't log your VPN activity — that part of the privacy pitch holds up — but outside the tunnel it runs a large advertising and analytics infrastructure full of US-based trackers, shares data within a broad corporate group, markets to you for a year after you cancel, and retains billing records for a decade.

Bitwarden is an open source password manager that encrypts your vault on-device so it cannot read your passwords — but it uses Google Analytics on both the website and service, is a US company subject to FTC jurisdiction and government requests, collects meaningful amounts of administrative data for marketing and product improvement, and uses legitimate interest as a legal basis for several secondary data uses.