A few years ago I was reinstalling Windows 11 on a laptop. Routine task. The kind of thing I've done dozens of times over the course of a career that has involved more computers than I can count. I wasn't thinking about surveillance, data collection, or even advertising. I was thinking I wanted to get this machine running again so I could move on to something more interesting.
Then Microsoft asked me to log in with a Microsoft account to finish the installation.
Not suggested or offered as an option. Required — or at least presented as required, which for most people amounts to the same thing. I knew there were workarounds. I'd used them before. But this time something made me stop and ask a question I'd been too incurious to ask before: why does Microsoft care whether I have an account to install their operating system on my own computer?
The more I looked into it, the more the answer clarified itself. The account requirement wasn't about security, convenience, or some feature offered out of altruism. It was about identity — specifically, about tying your computer's activity to a persistent, named profile that follows you across devices and services. An anonymous Windows installation generates data. An account-linked installation generates your data. Microsoft knows the difference, and they've worked consistently to eliminate the anonymous option.
The workarounds that existed in earlier versions of Windows 11 stopped working. New ones appeared. Those stopped working too. Each time, quietly, without announcement. I started paying attention.
What "Diagnostic Data" Actually Means
Once I started looking, I found the telemetry settings fairly quickly. They live in Settings → Privacy & Security → Diagnostics & Feedback, if you want to find them on your own machine. What I found there was instructive — not just for what the settings did, but for how they were written.
Microsoft divides its data collection into two tiers. The first is called Required diagnostic data. The second is called Optional diagnostic data, which is enabled by default.
Read those phrases again and notice what they're doing. Required implies necessity — something your computer needs to function properly. Diagnostic sounds medical and technical, the kind of thing a professional handles. Data is abstract and neutral. Put it together and you get language that sounds less like a description of Microsoft collecting detailed records of your behavior and more like routine system maintenance. Something you'd be foolish to interfere with.
That is not an accident.
The language was designed to be non-specific. Boring enough to ignore. Technical enough to make someone hesitant to disable. Difficult enough to understand that the instinct is to leave it alone — for fear of making something stop working.
I've spent twenty years reading documentation written by people who needed to describe sensitive things in ways that didn't alarm anyone. I recognize the craft. What Microsoft has built in these settings is a masterclass in making surveillance feel like maintenance.
So what is actually being collected? The "Required" tier — which you cannot turn off — includes device hardware specifications, driver versions, firmware details, crash reports with memory snapshots, and basic records of which applications you run and for how long. The "Optional" tier, which is on by default and requires deliberate action to disable, adds detailed app usage patterns, samples of what you've typed or written by hand, transcripts of voice input, browsing behavior tied to your Microsoft account, and behavioral data from every Microsoft service running on your machine.
That second list is worth reading slowly. Samples of what you've typed. Transcripts of what you've said. A behavioral record of your browsing, linked to your name.
- Required — always onHardware specs, driver versions, app usage duration, crash reports including memory snapshots
- Optional — on by defaultDetailed app behavior, samples of typed and handwritten content, voice input transcripts
- Optional — on by defaultBrowsing activity tied to your Microsoft account and Bing search history
- Optional — on by defaultBehavioral data from OneDrive, Teams, Xbox, Cortana, and other Microsoft services
- Cannot be disabledAny of the "Required" tier, on consumer editions of Windows 11 Home or Pro
That last point deserves emphasis. On the versions of Windows that most people run — Home and Pro — there is no setting to completely disable telemetry. The option to reduce collection to an absolute minimum existed in Windows 10 Enterprise edition and was subsequently removed. Consumer users have no equivalent. The choice Microsoft offers is between more collection and somewhat less collection. The option to opt out entirely was never on the table for most people, and what little existed has been quietly narrowed over time.
The Recall Incident: When the Curtain Slipped
In May 2024, Microsoft announced a feature called Recall as a flagship capability of its new Copilot+ PC hardware line. The concept was straightforward: Recall would take a screenshot of your screen every few seconds, run text recognition on those images, and build a local, AI-searchable database of everything you had ever looked at on your computer.
Everything. Every document. Every website. Every email. Every message. Every form field, including the ones where you typed passwords.
The feature was initially designed to be enabled by default, with minimal notification to the user. Within days of the announcement, a security researcher built a tool — he called it TotalRecall — that demonstrated how the entire database could be extracted and read in plain text by anyone with brief access to the machine. No special skills required. The data sat unencrypted, queryable, and comprehensive.
Microsoft delayed the rollout. Then redesigned it. Recall eventually shipped in a significantly altered form — opt-in rather than default, encrypted, requiring biometric authentication to access. The UK's Information Commissioner's Office opened a formal investigation. The worst version of the feature never reached most users.
I'm not telling this story to beat on Microsoft for a controversy that they eventually addressed. I am telling it because it reveals a great deal about the process. Recall was designed, built, approved, announced, and nearly shipped to millions of computers before anyone in a position of authority asked the obvious questions about what it would mean for the person sitting in front of that machine. The privacy implications weren't discovered in testing. They were discovered by the public, after announcement, because a researcher spent a weekend with the beta software.
That isn't a story about a bad feature, but rather one about what gets prioritized. It's about what questions get asked and, more importantly, what questions nobody thought to ask until a researcher spent a weekend with the beta.
Before You Feel Too Comfortable on Your Mac
This article has been about Windows because Windows is where my personal experience lies, and because Windows 11 is the operating system running on the majority of the world's personal computers. But I want to be direct about something before anyone reading this on a Mac or an iPhone sets the article down with a feeling of relief.
macOS sends diagnostic data to Apple. By default. The settings to limit it do exist. They aren't terribly difficult to find, but they only cover a portion of what's actually collected. Apple's privacy reputation is substantially better than Microsoft's — and in many respects it's genuinely earned — but "better than" is not the same as "clean." There is no major commercial operating system that does not phone home.
Speaking of phones, iOS and Android are their own significant stories, and I'll address them properly later in this series. For now, the short version: your phone knows more about you than your computer does, it's with you everywhere, and the data collection on both major mobile platforms makes Windows telemetry look downright respectful by comparison.
The logo on the lid doesn't change what's happening underneath it.
What To Do With This
I'm not going to end this article with a list of registry hacks or a step-by-step guide to disabling every telemetry setting in Windows. That's not what this piece is for, and frankly, for most people in most situations, the telemetry settings are only part of a much larger picture. Addressing them in isolation while leaving everything else untouched is a bit like locking the front door and leaving the windows open.
What I do want to leave you with is the question that the account requirement forced me to ask — the one I'd been too comfortable to ask before. Not "how do I turn this off" but "why is this on in the first place, and what does it say about the relationship between me and the software I'm running?"
The software industry has spent thirty years building products so useful and so familiar that most people never think to ask that question. The operating system disappears into the background of daily life. You stop seeing it. You just use it. That invisibility is partly good design — but it's also, not coincidentally, good cover.
In the next article, we'll look at what Google has been building from the other direction — not from the machine up, but from your behavior outward. If what Windows collects surprised you, what Google has assembled will be a different kind of uncomfortable entirely.