ScanLens vs CamScanner

About this comparison

ScanLens and CamScanner both scan documents on iPhone, but ScanLens processes scans and OCR on-device and offers a one-time lifetime purchase, while CamScanner is cloud-based, subscription-driven, and available across more platforms. Yes, we make ScanLens. That makes us biased, and you should keep that in mind. We have tried to write this page the way we would want a competitor to write it about us: factual, current as of April 2026, and willing to acknowledge what the other app does better. If you find anything inaccurate, email us at [email protected] and we will update it.

Pricing and features change. Verify current details on each app's App Store listing before making a decision. If you want the wider category view first, use the main scanner app comparison.

Quick verdict

Privacy and security

This is the area where the two apps differ the most, and the difference matters for some users more than others.

How ScanLens handles your documents

Scanning and OCR run on your iPhone. Cloud backup and linked accounts are optional, and document files are uploaded only when you enable backup or choose a cloud destination. ScanLens uses a limited anonymous backend identity for app functions and entitlements. Optional account data and document metadata may be handled through Supabase; purchases, diagnostics, product interaction, and attribution data are handled as described in the Privacy Policy.

How CamScanner handles your documents

CamScanner is a cloud-first product. Scanning and OCR rely on its server infrastructure, and many advanced features require uploading documents to the company's cloud. Sync, sharing, and team features are tied to a CamScanner account. Whether this is acceptable depends on the sensitivity of what you scan: marketing receipts and shopping lists are different from medical records and tax documents.

The 2019 CamScanner malware incident: a factual timeline

This section goes deeper than the rest of the page because it is the single event people type into Google when they search "is CamScanner safe" — and most write-ups online are either alarmist or dismissive. Here is the factual record from primary sources.

August 27, 2019. Researchers at Kaspersky Lab — one of the most recognized cybersecurity firms in the world — published a detailed technical report identifying a malicious component inside the Android version of CamScanner on the Google Play Store. The specific threat was classified as Trojan-Dropper.AndroidOS.Necro.n, a "dropper" Trojan embedded inside a third-party advertising SDK called AdHub that CamScanner had integrated for in-app monetization.

What the dropper could do. Per Kaspersky's disassembly, the Necro.n component was capable of (1) downloading and executing additional malicious modules from remote servers controlled by the attacker, (2) displaying intrusive interstitial advertising to generate fraudulent ad revenue, and (3) enrolling users in paid subscriptions to premium services without consent. Kaspersky's analysis included the specific URLs the dropper contacted and the encrypted payloads it fetched.

Google's response. Within days, Google removed CamScanner from the Play Store. Forbes, The Verge, ZDNet, Reuters, and BBC News all covered the removal. At the time of removal, CamScanner had been downloaded more than 100 million times on Android alone, meaning the affected install base was roughly equivalent to the population of Egypt.

INTSIG's response. CamScanner's developer, Shanghai-based INTSIG Information Co., Ltd., attributed the issue to the third-party AdHub SDK rather than to their own code. INTSIG released an updated version that removed AdHub entirely, submitted it to Google for review, and was reinstated on the Play Store a few weeks later. This explanation is plausible: supply-chain compromises through ad SDKs are a known risk in mobile advertising, and several other Android apps were affected by similar SDK incidents in the same period (notably ad fraud in popular camera and utility apps).

What was NOT affected. The 2019 incident was specific to the free Android build distributed through Google Play. The iOS version of CamScanner on Apple's App Store was not found to contain the Necro.n dropper. Apple's App Store review process and iOS sandboxing would have prevented the specific payload execution path the dropper used even if it had been present.

Chinese data jurisdiction and what it means for your documents

Separate from the 2019 malware question is a structural privacy question that applies even if CamScanner today is completely clean from malware: where are your scanned documents processed, and under which country's legal framework?

CamScanner is developed and operated by INTSIG Information Co., Ltd., a Chinese company headquartered in Shanghai. Scanning, OCR, and cloud sync features route user documents through INTSIG's server infrastructure. This means your documents fall under the legal regime of the People's Republic of China for the duration they are stored or processed by CamScanner's servers. Three pieces of Chinese legislation directly apply:

• Cybersecurity Law (2017). Requires network operators to store certain data on servers inside China and to cooperate with public-security authorities on data requests. Applies to any personal information of Chinese citizens, but the technical infrastructure is not partitioned by user nationality — data flowing through Chinese servers is in scope.
• Data Security Law (2021). Establishes a tiered system classifying data by sensitivity and requiring security reviews for cross-border data transfers above certain thresholds. Expands data-handling obligations to essentially all processors of digital data operating in China.
• Personal Information Protection Law (PIPL, 2021). Creates a data-protection regime broadly similar to the EU GDPR on paper — user consent, purpose limitation, data-minimization — but with narrower carve-outs for state security and public interest, which can be invoked to access data without the user's consent.

For scanning a restaurant menu or a grocery receipt, this framework is unlikely to matter. For scanning a medical record, a tax return, a lease agreement, a confidentiality-subject business contract, or anything covered by HIPAA, GLBA, GDPR, or attorney-client privilege, sending the document through servers under a different country's jurisdiction is a meaningful privacy and compliance consideration. ScanLens processes documents entirely on-device using Apple's Neural Engine and Vision framework — documents never leave your iPhone unless you explicitly share them, which removes the cross-jurisdiction question entirely.

This is not a claim that CamScanner mishandles user data. INTSIG has not been shown to do so. It is a structural observation about where the legal risk sits if something goes wrong, and it is why privacy-sensitive users search for a "CamScanner alternative" in the first place.

Strengths and weaknesses

What CamScanner does better than ScanLens

• Cross-platform. CamScanner runs on iOS, Android, Windows, Mac, and the web. ScanLens is iPhone-only. If your team uses multiple platforms, CamScanner is the practical choice.
• Established ecosystem. CamScanner has been around since 2011 with hundreds of millions of downloads. The team workflows, integrations, and documentation are mature.
• Wider raw OCR language list. CamScanner supports more total OCR languages, which matters for niche scripts.

What ScanLens does better than CamScanner

• On-device processing. Documents never leave your iPhone unless you choose to share them. CamScanner is cloud-first.
• No ads in any tier. ScanLens does not show ads — even in the free tier.
• No account required. You can use ScanLens without ever creating an account. CamScanner ties most features to a CamScanner account.
• Lifetime purchase option. $59.99 one-time vs. CamScanner's subscription-only model.
• Sync to your own cloud accounts. ScanLens uploads to iCloud, Google Drive, Dropbox, and OneDrive — accounts you already control. CamScanner is built around its proprietary cloud.
• Scanning and OCR run on your iPhone. Cloud backup and linked accounts are optional, and document files are uploaded only when you enable backup or choose a cloud destination. ScanLens uses a limited anonymous backend identity for app functions and entitlements. Optional account data and document metadata may be handled through Supabase; purchases, diagnostics, product interaction, and attribution data are handled as described in the Privacy Policy.