C:\Users\you> sc query DiagTrack // RUNNING. "connected user experiences and telemetry." you never asked to connect.
MICROSOFT
your computer phones home · you pay for the call
[01] THE MODEL
The OS as a service means the OS as a sensor. The thing that boots your computer now reports on what you do with it, by design, by default.
Windows used to be a product. You bought it, it ran, it shut up. Windows today is a relationship, and relationships generate data. Sign-in goes through their account. Search goes through their cloud. Diagnostics flow whether you like it or not: the "required" telemetry tier on Home and Pro has no off setting, only a dial between "some" and "more." The off switch exists. It ships with Enterprise, for customers with lawyers.
That split is the whole company. Enterprise trust is the brand; the consumer product is the sensor. The same firm that sells governments compliance dashboards sells you a Start menu with app promotions in it, an OS that demands a Microsoft account just to finish setup, and a "personalized experience" that is a euphemism with a privacy policy.
None of this required malice. It required a quarterly target for "monthly active devices" and the quiet observation that defaults decide everything, and they set the defaults. The corporation behaves like a corporation. The surprise would be anything else.
// the machine, specced
| 1975 | founded selling BASIC. the OS came later. so did the telemetry |
| ~1.4B | monthly active windows devices, by their own count. the largest sensor network ever shipped in a box |
| 2007-09-11 | becomes the first PRISM partner, per the NSA's own slide |
| home & pro | "required" diagnostic data cannot be turned off. enterprise editions get the switch |
| win 11 home | setup requires internet and a microsoft account. the local-account workarounds keep getting patched out |
| 2024 | app promotions ship in the start menu of a paid OS. you bought it. you're still the inventory |
// the license says you own a copy. the defaults say the copy owns you.
[02] THE RECEIPTS
The Snowden slides date Microsoft's entry into PRISM at September 11, 2007, first on the list, years before anyone else. Whatever the legal compulsion, the chronology stands: when the NSA built a pipeline into Silicon Valley, Microsoft was the proof of concept.
Skype ran a secret internal program, Project Chess, exploring how to make calls available to intelligence agencies, per 2013 New York Times reporting. Skype appears on the PRISM slide in February 2011; Microsoft closed the purchase that October and re-architected the supernodes onto its own servers. The peer-to-peer privacy story died quietly.
The Dutch data protection authority found in 2017 that Windows 10's telemetry processed personal data without properly informing users or obtaining valid consent. France's CNIL had issued a formal notice the year before. Microsoft adjusted some screens. The collection stayed.
Recall screenshots your screen every few seconds, OCRs it, and files your entire digital life into a searchable local database. Researchers found the first build stored it all in plaintext. Microsoft delayed it, encrypted it, made it opt-in, and shipped it anyway. The database your stalker dreams of now ships with the laptop.
In September 2024, LinkedIn members discovered a setting, on by default, feeding their data to generative AI training. The opt-out arrived after the ingestion started. EU and UK users were exempt, courtesy of regulators, not gratitude.
Add a third-party IMAP account to the new Outlook client and, per 2023 German reporting, your username, password, and mail sync through Microsoft's cloud. Your relationship with a completely different email provider now has a chaperone.
$ ./setup --local-account > that option has moved. it will keep moving. $ ./telemetry --set off > nearest available value: "required." // "required." required by whom was never specified. // it wasn't you. you'd remember.
[03] TRUST THEM COMPUTING
"Trusted computing" was the pitch. Read the fine print and the trust flows one way: you trust them. The verification was never mutual.
Count the layers. The OS is theirs. The office suite is theirs. The cloud it autosaves to is theirs. The repo host is theirs since the GitHub acquisition, and the AI assistant trained on those repos is theirs too, which is why developers sued over Copilot in 2022. The browser defaults to their search, the search feeds their ads, and the ad division runs on Xandr, bought from AT&T in 2022. They spent $69 billion on Activision and acquired, among other things, the play patterns of hundreds of millions of people. A company holding every layer doesn't need to spy on you. It needs defaults. It sets all of them.
This is why "feature" is the most load-bearing word in Redmond. Recall is a memory feature. Telemetry is a reliability feature. The mandatory account is a convenience feature. Cloud sync is a productivity feature. Every one of them is a data flow with a marketing name, and every flow terminates in the same place: a building you will never enter, governed by terms you didn't read, subject to legal process you will never see. The agency doesn't need to break in. The door was a deliverable.
// the trusted platform module is in your machine. you are not who it works for.
[04] VERDICT
The OS is the root of trust. Pick one that doesn't bill you as the telemetry.
Everything you encrypt, every password you type, every careful habit you build sits on top of the operating system, and an OS that reports on you poisons the stack from below. The fix is boring and available today: Linux exists, encryption exists, and neither requires a Microsoft account to boot. Microsoft is one head of a larger animal, Google and Facebook and Amazon run the same play with different logos, and the pattern is the point. Corporations can't care about you, the state has already plumbed them, so do the caring yourself. My own setup is on the stack page. None of it phones home.
// you don't have to trust them. that was always the feature they couldn't ship.