I once jotted down a rough draft of a salary negotiation email in a notes app, just thinking out loud, nothing sensitive, and within the hour I was getting ads for negotiation coaching courses. That's not a coincidence. That's a notes app reading what you typed and selling the pattern to an advertiser.

Most people don't think twice about which notepad app they're using for a quick scratch note. It's just text, right? Except a lot of free notepad and notes apps make their actual money by analyzing what you type, not by charging you for the app itself, and the terms of service buried in the signup flow usually say exactly that, if you ever bothered to read it.

How a "free" notes app actually makes money

If an app costs nothing and isn't selling you a subscription, it's making money somehow, and for a lot of notes apps, that somehow is your data. This can range from relatively harmless aggregated analytics about what kind of content people write, all the way to genuinely invasive practices like scanning your text for keywords to build an advertising profile.

The tricky part is that this usually isn't hidden exactly, it's disclosed in a privacy policy that almost nobody reads in full, written in language that's deliberately vague about exactly what gets analyzed and what doesn't. "We may use content to improve our services" can mean almost anything, and it usually means more than you'd guess.

What you should actually be checking

You don't need to read an entire privacy policy line by line, but there are a few quick signals worth checking before you trust a notes app with anything personal.

  • Does it require an account and sync to the cloud by default, even for quick throwaway notes
  • Does the privacy policy mention using your content to "improve services" or "personalize" anything
  • Is the app's business model unclear, meaning it's free with no subscription tier and no obvious other revenue source
  • Does it request permissions that have nothing to do with taking notes, like contacts or location access
If you can't tell how an app makes money, the honest answer is usually that you're the product, not the customer.

This matters more than it sounds like it should

Most of what people jot down in a quick notes app isn't sensitive. But some of it is: a draft of something personal, a password you meant to move somewhere safer later, a half-formed idea for a business you haven't told anyone about yet, a vent session about a coworker. None of that is content you'd want quietly fed into someone else's advertising or analytics pipeline, even in aggregate, even anonymized.

What an actually private notepad looks like

The simplest version of privacy here is software that doesn't need an account, doesn't sync anywhere by default, and processes your text entirely in your browser without sending it to a server at all. If nothing leaves your device, there's nothing to analyze, sell, or accidentally leak.

📝
Try It Yourself
Online Notepad
A distraction-free notepad that runs entirely in your browser, with no account, no sync, and no data leaving your device.

This isn't to say every notes app is secretly malicious. Plenty of well-known apps are genuinely careful with your data and disclose exactly what they do with it in plain language. But for quick scratch notes, drafts, or anything you'd rather not think twice about, the safest option is software that simply has nothing to gain from reading what you wrote.

📌 Key Takeaways
  • Free notes apps often make money by analyzing the content you type, not by charging for the app
  • Vague privacy policy language like "improve our services" can cover a lot more than it sounds like
  • Apps requiring an account and cloud sync by default are worth a closer look before trusting them
  • A notepad that processes everything in your browser with no server involved has nothing to analyze
  • Save the truly sensitive drafts for tools where you understand exactly where the data goes

Before you type something sensitive into any notes app

  1. Check whether the app requires an account and syncs by default
  2. Skim the privacy policy for vague language about using your content
  3. For anything genuinely sensitive, use a tool that processes everything locally in your browser
  4. If you're not sure how an app makes money, treat that as a reason for caution, not comfort