Microsoft denies Windows 11 spying claims about performance service

Windows 11 whesvc Windows Health and Optimized Experiences Microsoft performance diagnostics

Social‑media posts alleged that a Windows 11 background component called Windows Health and Optimized Experiences (identified as “whesvc”) was spying on users by sending CPU, temperature and battery data to Microsoft every 15 minutes. Microsoft refuted the claim, explaining that the service was introduced in 2025 to capture performance‑related diagnostics when the system detects slowdown. The data is stored locally in %SystemRoot%\Temp\DiagOutputDir\whesvc and is only transmitted if the user voluntarily submits a report through the Feedback Hub.

Microsoft vice‑president and community lead Scott Hanselman clarified that the component does not record screens or transmit information without user consent. It simply logs performance metrics to help improve Windows stability and is not limited to laptops. The company emphasized that the service is a standard diagnostic tool, not a spying mechanism.

Entities

Microsoft · Scott Hanselman · Windows 11 · Windows Health and Optimized Experiences · whesvc

Claims

What the coverage asserts, and how many sources carry each claim.

[○ 1 SOURCE] whesvc monitors system slowdowns and stores diagnostic data locally on the device. spidersweb.pl
[○ 1 SOURCE] Windows 11 includes a background component called whesvc that runs at system startup. spidersweb.pl
[○ 1 SOURCE] Microsoft vice‑president Scott Hanselman confirmed that whesvc is a diagnostic tool introduced in 2025. spidersweb.pl
[○ 1 SOURCE] whesvc was added to Windows at least a year ago, first disclosed in a May 2025 Canary build. spidersweb.pl
[○ 1 SOURCE] whesvc does not record screen images or send data to Microsoft every 15 minutes. spidersweb.pl
[○ 1 SOURCE] The stored diagnostic data remains on the device unless the user explicitly permits sharing via the Feedback Hub. spidersweb.pl