We can understand your concern about this. After the initial whitelist completed, SecureAPlus will submit the hashes to Universal AV server for scanning. This is to check whether there is any applications that not supposed to be trusted (e.g. trojan, malware). If it found any, it will prompt the user. Once the user take an action (e.g. quarantine or delete), the hahses of those unwanted files will be also automatically removed from the whitelist.