Avast Free Antivirus vs Surfshark Antivirus Comparison

• Free Antivirus: Free; the mobile apps show third-party ads
• Premium Security for 1 computer and 1 phone, renewal: $77.99 a year, the price the store calls the renewal price
• Premium Security for 1 computer and 1 phone, first year: Intro: $49.08 for the first year
• Premium Security for 10 devices, renewal: $99.99 a year, the price the store calls the renewal price
• Premium Security for 10 devices, first year: Intro: $69.48 for the first year
• Ultimate for 10 devices, renewal: $139.99 a year, the price the store calls the renewal price; $69.48 for the first year

• Surfshark One, renewal: $99 a year after the first term, whether that term was 1 or 2 years
• Surfshark One, month to month: $19.95 billed every month, no discount
• Surfshark One, first 2 years: Intro: $67.23 for the first 27 months (24 plus 3 bonus months), then $99 a year
• Surfshark One, first year: Intro: $44.85 for the first 15 months (12 plus 3 bonus months), then $99 a year
• Surfshark One+, renewal: $119 a year after the first term

The product privacy notice says the desktop app sends samples of suspicious files and detection metadata to Avast's servers through CommunityIQ, and that it may 'directly analyze and maintain these artifacts in our safe environment'. It also lists the URLs of websites visited, 'malicious and non-malicious', and referrers, kept for 36 months for service provision. The support article says file-sample sharing (CommunityIQ) can be unticked in Settings ▸ General ▸ Personal Privacy. On phones, SMS Guard keeps texts that contain links or come from senders not in your contacts, with personal identifiers removed, for up to five years.

Surfshark says Cloud Protect checks suspicious files against its cloud database in real time 'without ever seeing your personal data', but neither the product pages, the help center nor the privacy policy say whether a file's fingerprint or the file itself is sent.

The Gen Digital privacy notice says 'We do not sell your personal data to third parties', but also that 'Where permitted by applicable law, we may share personal data with third parties for advertising purposes' and that data is used 'to serve you with relevant advertising and content, both on our properties and on third-party properties'. The consent policy says free mobile apps show third-party ads from partners such as AdMob, Amazon, Facebook Audience Network and InMobi, with consent asked at installation and a paid ad-free version. The desktop app uses Google Analytics; the phone apps use Google Firebase, AppsFlyer and Singular. In the free desktop version, sharing app-usage data for Avast's own offers is on by default and cannot be switched off.

The privacy policy's antivirus section uses device information to enforce the device limit and processes the malware name and type, country, OS and user ID for statistics. Separately, with your consent, the apps send device and engagement data to analytics and attribution providers, and the policy says advertising partners help attribute sales and show interest-based ads. The policy says Surfshark does not sell personal data.

For users in the European Economic Area the controller of personal data is Avast Software s.r.o., Pikrtova 1737/1A, Prague 4, Czech Republic, so EU data protection law applies to it. Avast's parent, Gen Digital Inc., has its privacy team in Tempe, Arizona, and the group's general privacy notice says it may disclose data to public authorities and in legal proceedings. In the US case of 2024 the FTC named Avast Limited, a UK company, and its Czech subsidiary.

The contract is with Surfshark B.V., registered in Amsterdam, the Netherlands. The terms of service are governed by the law of the British Virgin Islands.

Avast was founded in Prague in 1988 as Alwil Software. On 12 September 2022 the US company now called Gen Digital, listed on NASDAQ, completed its acquisition of Avast; the Avast website and policies now carry Gen Digital's name.

Surfshark B.V. sells the antivirus as part of its own subscription. The privacy policy says it shares data with its group companies in the EEA, the United States and the United Kingdom, without naming them.