Well, it is a file format standard for electronic business cards. The latest standard is vCard 4.0 defined in RFC 6350. “VCF’ (virtual contact file) is extension used to identified this file format.
You can create one in Outlook app, online website, in your text editor or export it from your ERP solution (if they follow standards). You can also send vCards via e-mail, MMS, instant messeger or put them on your website and even better your mobile website version. Also, you can turn them into QR code.
Basically, they can contain name and address information, telephone numbers, e-mail addresses, URLs, logos, photographs, and audio clips.
Outlook supports vCard and helps you to store contacts in exchangeable format. It is generated locally so no privacy issues. I don’t use it, but here is a tutorial for you: https://www.lifewire.com/create-vcard-outlook-1173507
Text editor (Notepad/PSPad/TextEdit)
Follow the standard RFC 6350 and crunch it yourself. Not practical, unless you want to be VCF master or code some apps or addons with it. No privacy issues.
Project from bbros.us (two web developers), that provides QR/hcard option on top of classic vCard, easy to use but no privacy page / information about what is happening to your data.
Most user friendly generator, but based on their privacy-policy, they do collect data – in particular in Jordan. No info about 3rd parties. I leave that one with you.
This one covers vCard, QR and Matrix + they provide a bulk generation upon request (as a service). The site scares with lots of text, but it gives you better understanding of how to use it in return. No info about privacy.
If you dare to use Microsoft Store, then give this one a try. I assume it would be locally generated with no data collection in the backend. The negative review is not relevant, so it might do the job. I have not test it it.
The most safest generator, but also very painful for non-tech person. To generate it, you need to learn how to run Node.JS with NPM. The source-code is public and you will generate it locally, so no issue with privacy. More suitable for developers.