Quote from izeickl:
Yes they can, if they wanted to/inclined to.
They could make it log key presses and send data back, send lists of files from your directorys back etc, anything at all. When you run any program on your comp a lot of "good faith" is implied in that the company isnt doing something you dont want them to or that that little calculator program isnt secretly sending copys of your emails to E.Vil Corp. Obviously if they DID and people found out (very rarely would anything like that go on for long without someone noticing and raising a alert to others) then that company would find itself:
A) With lots of lawyers calling them.
B) Losing all their customers etc.