Where Your Scans Go: What Cloud Scanner Apps Keep

Privacy · 2025-11-06 · 7 min read

A phone scanner turns a passport, a lease or a tax form into a file in seconds. In many popular apps, that file goes to a server first. Here's what that means, and what changes when the scanner never connects.

Adobe's own help pages say Adobe Scan saves each scan to Adobe cloud storage automatically. Answers on Adobe's community forum say there is no option to switch that off: the upload is how the app is designed to work.

The Scan Is the Easy Part

A document scanner does three jobs. It finds the edges of the page and flattens the photo. It reads the text, so the file can be searched. Then it stores the result somewhere. The first job happens on your phone in almost every app. The other two are where apps differ, and where your documents can leave your hands.

Text recognition, or OCR, is the step that matters most. To make a scan searchable, something has to read every word on it: the name on a passport, the income on a tax slip, the account number on a statement. Some apps do that reading on the phone. Others send the page image to a server and get the text back.

What the Cloud Version Looks Like

Adobe Scan is one of the most popular scanner apps, and it is open about its design. Adobe's documentation for both iPhone and Android says a saved scan is converted to PDF and stored in Adobe cloud storage automatically, and its App Store listing says scans are automatically saved to Adobe Document Cloud. In a January 2020 reply on Adobe's community forum, a top-ranked community responder told a user who wanted to keep scans on their phone that there was no option to stop saved scans going to Document Cloud, and that it was 'an as designed behaviour'. A 2021 answer in the same forum said there is no direct option to turn off the Document Cloud from the app.

Cloud storage has real benefits: your scans follow you to a laptop, and a lost phone doesn't mean lost files. But it also means a copy of every page you scan sits on a company's servers, under that company's terms, for as long as its policies say.

Terms Can Change Under You

In June 2024, Adobe asked Creative Cloud and Document Cloud users to re-accept updated terms of use. The pop-up described Adobe's right to access content for review, and many users, including people handling confidential client work, read that as permission to look at their files. The backlash was loud enough that Adobe published a clarification on June 6 and a rewritten set of terms on June 18, within two weeks.

Adobe's terms now say it does not scan or review content stored locally on your device, and does not train generative AI models on your content (Adobe Stock submissions are the exception). Content you put in its cloud is different: the terms let Adobe review it in limited ways. The clarification is welcome. The episode still shows the underlying issue: when your documents live in someone else's cloud, what can happen to them is decided by a contract you don't write, and that contract can be updated with a pop-up.

Free Apps Bring Passengers

Storage is not the only way out of your phone. In August 2019, Kaspersky researchers reported that recent versions of CamScanner, an Android scanner app with more than 100 million downloads on Google Play, shipped with an advertising library that contained a malicious module. The module could download further code that showed intrusive ads and signed users up for paid subscriptions. CamScanner said the library came from a third-party ad provider, AdHub. Google removed the app, and the developers later removed the library in an update.

The lesson is broader than one app. Every software kit an app includes, for ads, analytics or crash reporting, is code from another company running next to your documents. A scanner that handles IDs and contracts while carrying an ad network is trusting that network with very sensitive neighbours.

  • Where does text recognition run: on the phone, or on a server?
  • Are scans uploaded by default, and can uploading be turned off?
  • Does the app need an account before you can scan?
  • Which third-party SDKs does it include for ads or analytics?
  • What does its App Store privacy label list under 'Data Linked to You'?

On-Device OCR Is No Longer a Compromise

For years, the best OCR ran on servers. Today, Apple's Vision framework includes text recognition that runs entirely on iPhone, with no network connection and no per-page cost. For a scanner, that changes the trade-off: you no longer have to send a page away to make it searchable.

How HushScan Handles It

HushScan is built on that change. Scanning, text recognition, search and the detection of personal information all run on your iPhone, using Apple's Vision framework. The app contains no networking code at all, has no account and no servers, and includes no third-party SDKs. Its App Store privacy label is Data Not Collected, and it works in Airplane Mode.

You don't have to take that on trust. iOS keeps an App Privacy Report (Settings → Privacy & Security → App Privacy Report) that lists each app's network activity. Turn it on, use HushScan for a week, and there will be nothing listed for it. Your documents leave the phone only when you share or export one yourself, through the iOS share sheet, to the place you choose.

Sources

  • Adobe Scan help (iOS), 'Scan documents'. https://www.adobe.com/devnet-docs/adobescan/ios/en/scan.html
  • Adobe Scan help (Android), 'Scan documents'. https://www.adobe.com/devnet-docs/adobescan/android/en/scan.html
  • Adobe Scan, App Store listing (page read October 30, 2026). https://apps.apple.com/us/app/adobe-scan-pdf-scanner-ocr/id1199564834
  • Adobe Community, thread 'How to turn off Adobe scan cloud upload', reply of January 20, 2020. https://community.adobe.com/t5/adobe-scan-discussions/turn-off-adobe-scan-cloud-upload/m-p/10845642
  • Adobe Community, 'Does Adobe Scan offer a way to not utilize the Adobe cloud', answer of June 14, 2021. https://community.adobe.com/t5/adobe-scan-discussions/does-adobe-scan-offer-a-way-to-not-utilize-the-adobe-cloud/m-p/12104402
  • Thomas Claburn, The Register, 'Adobe users upset over content', June 6, 2024. https://www.theregister.com/2024/06/06/adobe_users_upset_over_content/
  • Scott Belsky and Dana Rao, Adobe Blog, 'Updating Adobe's Terms of Use', June 10, 2024. https://blog.adobe.com/en/publish/2024/06/10/updating-adobes-terms-of-use
  • CGChannel, 'Adobe updates its Terms of Use following artist backlash', June 2024. https://www.cgchannel.com/2024/06/adobe-updates-its-terms-of-use-following-artist-backlash/
  • Adobe General Terms of Use, sections 2.2 and 4.3 (version published October 3, 2025, read October 30, 2026). https://www.adobe.com/legal/terms.html
  • Kaspersky, 'Malicious code found in CamScanner Android app', August 27, 2019. https://www.kaspersky.com/blog/camscanner-malicious-android-app/28156/
  • XDA Developers, on CamScanner's statement naming AdHub, August 2019. https://www.xda-developers.com/camscanner-app-injecting-malware/

Related products