Yes. If you use a cracked version that phones home to a hacker's server, that hacker can see everything you do. The irony is that you are paying for "privacy" with complete exposure.