TP-Link routers send customer data to German antivirus developer Avira without the user’s consent.
For several years, TP-Link has partnered with Avira to secure Wi-Fi routers and other products. HomeCare and HomeShield functions are designed to protect connected devices from cyber attacks and various cyber threats.
Reddit forum user ArmoredCavalry noticed that the TP-Link Archer AX3000 router is sending data to Avira SafeThings servers. He noted that more than 80,000 applications were submitted within 24 hours. The user noticed that Avira HomeShield services were completely disabled, but the router still sent all its traffic for analysis.
In May 2021, in a review of another model of the TP-Link Deco X68 router on the XDA portal, a similar problem was discovered – the router transmitted data even when the function was disabled. Then TP-Link responded to the situation by releasing a firmware that corrects this error.
