I may log your visit with Google Analytics, New Relic, or CloudFlare and share that information with my friends, family, and coworkers. I just want to know if Norman is growing in popularity or not and where people learn about it.
I also collect access and error logs at the "crit" level for Apache. I only look at the logs if the site breaks to find out how to fix it and don't share them with anyone.
The software installers for Norman don't do any sort of tracking or "phoning home" whatsoever.