Pretty much every AV has this capability built-in, based on how the software works. All of them intercepts and evaluate connections; recording all of the activities and uploading the log to AV company's server is may or may not have been enabled. Even if it is enabled, most people wouldn't know without constantly monitoring the network connection. Avast did it semi-openly and have been caught, while others may just have a few partners with non-discloser agreement in place and have not been caught as of yet...
The "intercepts and evaluate connections" is applied to SSL/TLS connections as well. While it has its own security risk doing that, the AV could record all activities in plain text, including UID/PWD. This is why I don't enable AV monitoring SSL/TLS connection and remove the AV installed SSL/TLS certificate.
In my view, the government is even worse, when it comes to privacy. The case in point is the buycrash (bad link removed) website, owned by LexisNexis. With the exception of State of Florida, all states in the US file their police reports related to vehicles with BuyCrash. You can download the police report from the site that looks like this:
The actual report includes:
- Name
- Address
- Phone #
- Vehicle make, model, year, body style, VIN#, license plate number
- Name of insurance company, etc...
You'd think this is more private information, than the deindentified browser history, but that's not the case. As the domain name suggest, buycrash.com, sells this data, not just collecting it. That's quite evident by the "Business Account Login" link in the image above. The sad part in this is that you have no way opting out from this at all.
PS: I did not have any accident, just a stolen license plate from the front of the vehicle. This requires reporting it to the local police department, before requesting a license plate replacement at the MVD. This didn't seem like a big issue, until I've noticed in my EZ-Pass statement online that someone is using the stolen license plate for going through toll bridges. But that's another story...