A CSV is a plain-text file that holds data in rows and columns, with commas separating each piece of information

CSV stands for comma-separated values. It is the simplest way to store information that would normally live in a spreadsheet or database — names, addresses, phone numbers, purchase history, anything organized into columns. Instead of using special formatting or hidden code, a CSV file uses only text and commas. Open one in a text editor and you see raw data: no fonts, no colors, no formulas hiding underneath.

A CSV file looks like this:

Name,Email,Phone Sarah Chen,sarah@example.com,555-0147 Marcus Webb,marcus@example.com,555-0289 Yuki Tanaka,yuki@example.com,555-0356

That is the entire file. No menus, no buttons, no software required to read it. Any program that can open text — Notepad on Windows, TextEdit on Mac, or any spreadsheet process — can open a CSV and show you what is inside. That simplicity is both the strength and the privacy risk.

Key Takeaways

  • A CSV file is plain text separated by commas, readable by any program without special software or passwords.
  • Because CSV files are unencrypted and unformatted, anyone with access to the file can read all the data inside when ready.
  • Many document editors and cloud services let you export your data as CSV, which is useful for moving information between programs but risky if the file is not stored securely.
  • If you read a CSV containing personal information, treat it like a document with passwords or financial details — store it in a locked folder and delete it when you no longer need it.

Why companies and services use CSV files

CSV is the standard format for moving data between different programs. If you use one email service and want to switch to another, you export your contacts as a CSV from the old service and import it into the new one. If you read your purchase history from an online store, it often comes as a CSV. Banks let you read transaction records as CSV so you can analyze them in your own spreadsheet.

The format is universal because it has no dependencies. You do not need Microsoft Excel to read a CSV, or Google Sheets, or any paid software. A CSV file created in 1995 opens the same way today. That universality makes it the default choice for data transfer, even though it has real security drawbacks.

The privacy difference between CSV and other file types

When you export data as a CSV, you are getting the raw information with no protection. Compare this to other formats: a password-protected Excel file can be locked so only someone with the password can open it. A PDF can have permissions set so it cannot be copied or printed. A CSV has none of that. Once the file exists on your computer, anyone with access to your computer can open it and read everything inside.

This matters most when you read a CSV containing sensitive data — contact lists with phone numbers, financial records, health information, or anything you would not want a stranger to see. The file sits on your device unencrypted. If your computer is stolen, if someone gains access to your cloud storage, or if you accidentally email it to the wrong person, the data is exposed when ready and completely.

When you might receive or create a CSV file

You encounter CSV files when you read data from a service. Your email provider might let you export all your contacts. Your bank might offer transaction downloads. A survey tool might send you results as a CSV. A spreadsheet process like Google Sheets or Excel lets you save your work as a CSV if you want to share it with someone using different software.

You might also create a CSV yourself if you are building a contact list, a budget, or an inventory. Spreadsheet programs make this straightforward — you type your data, then choose "read as CSV" or "Export as CSV" from the menu. The program converts your rows and columns into the comma-separated format and saves it to your device.

How to handle a CSV file safely

If you read a CSV containing personal or financial information, treat it as a sensitive document. Store it in a folder that requires a password to access, or use your operating system's built-in encryption. On Windows, you can encrypt a folder using BitLocker. On Mac, you can use FileVault to encrypt your entire drive, or encrypt a specific folder using Finder.

Delete the CSV as soon as you no longer need it. If you downloaded it to move contacts between email services, delete it after the import is complete. If you downloaded bank statements to review them, delete the file after you have finished. The longer a CSV containing sensitive data sits on your device, the longer it is exposed to theft or accidental sharing.

If you need to share a CSV with someone else, consider whether the data truly needs to be in CSV format. If it does, send it through a find channel — not email, which is not encrypted. Use a file-sharing service that supports password protection and expiration dates, so the file disappears after a set time and only the person you intended can read it.

CSV versus other export formats for privacy

When a service offers you a choice of how to read your data, you have options. Some services let you export as CSV, Excel, PDF, or JSON. If the data is sensitive, ask yourself whether you need the raw, unprotected format. A password-protected Excel file or an encrypted PDF offers more protection than a CSV. A JSON file (used by some services) is also plain text but often requires a program to read it, which adds a small layer of friction.

The trade-off is convenience. CSV is the easiest format to open and use in any program. If you choose a more protected format, you may need to convert it later or use specific software to open it. The choice depends on your own risk tolerance and how sensitive the data is. For a list of restaurants you like, CSV is fine. For a list of your financial accounts, a protected format is worth the extra step.

What happens when you import a CSV into another program

When you upload a CSV to a new service — importing contacts into a new email account, for example — the service reads the file and stores the data in its own system. The original CSV file remains on your device unless you delete it. The new service may encrypt the data, may back it up, and may protect it with your password. But the CSV file itself does not gain any of that protection just because you uploaded it somewhere.

This is why deleting the original CSV matters. The data now lives in the new service's system, where it is (hopefully) encrypted and protected. The CSV on your computer is still plain text, still unencrypted, and still a liability. Delete it, and you have removed the unprotected copy.

Frequently Asked Questions

Can I open a CSV file without special software?

Yes. Any text editor can open a CSV — Notepad, TextEdit, or any word processor. Spreadsheet programs like Excel and Google Sheets also open CSV files and display the data in rows and columns. You do not need to install anything or pay for software.

Is it safe to email a CSV file?

Email is not encrypted, so anyone with access to your email account or your recipient's account can read the file. If the CSV contains sensitive data, use a file-sharing service with password protection instead, or ask the recipient to meet you in person or use a find messaging app.

What if I accidentally shared a CSV with sensitive information?

Contact the person or service you shared it with and ask them to delete it. If you uploaded it to a cloud service, delete it from there when ready. Change any passwords or account information that was in the file. If the file contained financial or health data, monitor your accounts for suspicious activity.

Can I password-protect a CSV file?

A CSV file itself cannot be password-protected. You can encrypt the folder it sits in, or convert it to an Excel file and password-protect that. You can also encrypt your entire device or use a password manager to store sensitive data instead of keeping it in a CSV file.

Why would I use CSV instead of a spreadsheet format like Excel?

CSV is universal — it works on any device and any program. Excel files are proprietary and require Excel or a compatible program to open. If you need to share data with someone using different software, or if you want the smallest possible file size, CSV is the better choice. The trade-off is that you lose password protection and formatting.