Document Scanner Privacy Comparison: Where Does Your Data Actually Go?

We analyzed the privacy policies of the most popular document scanner apps to answer one question: what happens to your documents after you scan them?

Methodology

For each app, we reviewed:

• Official privacy policies
• App Store privacy labels
• Technical documentation
• Third-party privacy audits (where available)

The Apps We Analyzed

CamScanner

Developer: INTSIG Information Co., Ltd. (China)
Downloads: 520 million

What they collect:

• Documents and images you upload
• Device information (hardware model, OS version)
• Usage data (IP address, login times, ad clicks)
• Data from cookies and web beacons

Where documents go: CamScanner's cloud servers

Data sharing: Affiliates and third parties "under certain circumstances"

Source: CamScanner Privacy Policy

Adobe Scan

Developer: Adobe Inc. (USA)
Part of: Adobe Document Cloud

What they collect:

• Documents processed through the service
• Usage information associated with your Adobe account

Where documents go: Adobe Document Cloud servers

AI/ML analysis: Adobe "may analyze your content processed or stored on our servers using techniques such as machine learning" (opt-out available)

HIPAA: BAA available only for Enterprise Plan customers

Source: Adobe Privacy Policy

Microsoft Lens

Developer: Microsoft Corporation (USA)
Integrated with: OneDrive, Microsoft 365

What they collect:

• Documents uploaded for processing
• Usage data (may be collected but "not linked to identity")

Where documents go: Microsoft cloud (OneDrive) for OCR and conversion

Full features require: Microsoft account

Source: Microsoft Privacy Statement

Genius Scan

Developer: The Grizzly Labs (France)
GDPR compliant: Yes

What they collect:

• Documents stored on device by default
• Crash data (for 1 year)
• Purchase identifiers

Where documents go: On-device for core features

Exception: "Smart naming" feature sends document text to OpenAI, which "may keep the text for up to 30 days for abuse monitoring" (feature is optional)

Source: Genius Scan Privacy Policy

ScanDash

Developer: ScanDash (USA)
Processing: 100% on-device

What they collect:

• Nothing from your documents (they never leave your device)
• Crash reports (opt-in via iOS)
• Subscription status (via App Store)

Where documents go: Your iPhone only (or your iCloud if you enable sync)

Third parties: Apple only (for purchases and optional iCloud sync)

Comparison Table

App	Processing	Account	Third-Party Sharing	HIPAA
ScanDash	On-device	None	None	N/A (no server)
Genius Scan	Mostly on-device	Optional	OpenAI (optional)	SDK available
Adobe Scan	Cloud	Required	Adobe affiliates	Enterprise only
Microsoft Lens	Cloud	Required	Microsoft services	With O365 BAA
CamScanner	Cloud	Required	Affiliates + third parties	No

What This Means for You

If you scan tax documents, medical records, or contracts:

Use an app with on-device processing. Your sensitive information shouldn't be uploaded to cloud servers.

If you need HIPAA compliance:

Most consumer scanner apps are NOT HIPAA compliant. CamScanner, Scanner Pro, and Turbo Scan do not offer BAAs.

If you want the most privacy:

Choose ScanDash or Apple Notes. Both process documents entirely on your device with no data sent to company servers.

The Bottom Line

Privacy policies vary significantly. Before trusting an app with sensitive documents, check where your data actually goes.