The Hidden Cost of Free Online File Converters

Search "compress PDF" or "HEIC to JPG" and the first page is all free websites. Drop the file in, wait a few seconds, download the result. No account, no install, no charge.

Running those sites is not free. They pay for servers that process millions of files, for staff, and often for the search ads that put them at the top of your results. Someone covers that. This post is about who, and what it means for the file you just uploaded.

How free converters pay for themselves

Most of them, most of the time, make money in ordinary ways:

• Ads. The page around the upload box is ad space, and a busy converter gets a lot of page views.
• Upsells. Free tiers come with limits: a maximum file size, a few files per hour, a watermark, a queue. Paying removes them.
• Desktop apps and business plans. Many of the bigger services sell an offline app or a team plan.

None of that is sinister. It is the same deal as most of the free web. The reputable services are open about it.

At the bad end, it is different:

• Malware. In March 2025 the FBI’s Denver office warned that criminals were setting up fake free file converter sites. You upload a file, and you get back something that installs malware, or the site uses your upload to collect personal information such as names, addresses, bank details and passwords. Some of these sites look exactly like the real thing.
• Data. A site with no stated policy, run by nobody you can identify, has no reason to delete what you upload. Documents are full of useful information.
• Junk downloads. "Download our converter to get your file" is a classic way to bundle unwanted software.

What happens to the file you upload

Even with a good service, it helps to picture what an upload is. Your file:

1. Leaves your Mac and travels to the service’s servers, usually run by a cloud hosting company. 2. Is stored while it is processed and until you download the result. 3. May be logged. File names, sizes and times often end up in logs, even when the content is deleted. 4. Is deleted according to the service’s policy. iLovePDF, for example, says it deletes processed files within two hours, except documents signed through its signature service, which it keeps for up to five years. We looked at that in detail in is iLovePDF safe for confidential documents.

A good service does every step carefully. But step 1 still happened. A copy of your file sat on someone else’s computer for a while.

For a menu, a school form or a holiday photo, that does not matter at all. For some files it matters a lot.

The files where it matters

• Contracts and client work. Many NDAs and client agreements say confidential material cannot go to outside services without permission, however good their security.
• Work files. Plenty of employers only allow approved tools. An online converter is rarely on the list.
• ID documents. Passport and driving licence scans are exactly what identity thieves want.
• Financial and medical papers. Payslips, tax returns, bank statements, test results.
• Photos with location data. A phone photo can carry the exact spot it was taken. We wrote about stripping that before you share.
• Anything under GDPR or HIPAA. Other people’s personal data comes with rules about where it can go. More in the compliance post.

How to spot a dangerous converter site

If you do use an online tool, a few checks go a long way:

• Read the address. Copycat sites use names one letter off from the real ones.
• Look for a company. A real service names the company behind it and has a security or privacy page and a way to contact support.
• Never download a program to get your file. A converter should give you the file you asked for, not an installer.
• Check what you got back. A PDF should come back as a .pdf, not a .exe, a .dmg or a .zip you did not expect.
• Ignore scare pop-ups. "Your Mac is infected" is never true on a converter site.

Or skip the upload entirely

Here is the thing: almost none of these jobs need a server. Compressing, converting, merging and splitting are things your Mac can do by itself. A lot of them are already built in:

The built-in tools run out at the jobs with a number or a batch attached: get this PDF under 5 MB, strip all the metadata from forty photos, turn this MOV into an MP4 small enough to send.

That is where Dhito fits. It is a search app for your Mac with around 50 local file tools built in, including compress to a set size, merge, split, convert HEIC, strip EXIF and GPS, watermark, convert and compress video and audio, and compare two PDFs. You find the file by describing it, then right-click and run the tool. Every result is written as a new file next to the original, nothing is ever overwritten, and nothing is uploaded, because there is no upload in the app at all. It works on a plane.

The short version

Free converters are paid for with ads and upsells at best, and with your data or your Mac’s safety at worst. The good ones are fine for files you would happily share with a stranger. For everything else, the safest upload is the one you never make, and for most jobs your Mac never needed the internet in the first place.