Fidelity Investments Security & Privacy Scorecard

Fidelity Investments

What This Means for You

In-app behavior and account activity are shared with multiple analytics and marketing platforms, including services that use user data to send targeted messages. User data travels with less protection than expected on untrusted networks. User devices are also profiled in the background by fraud and identity verification services.

Recommendation: Use With Caution

Best For: Fidelity customers comfortable with standard analytics
Avoid If: Users who access accounts on public or untrusted Wi-Fi

Key Findings

Data Security - 3 findings (1 high, 2 medium)

Network Security - 2 findings (1 critical, 1 medium)

Code Safety - 0 findings

Privacy - 4 findings (1 high, 2 medium, 1 low)

Privacy Concerns

What Data is Collected

The app collects behavioral and activity data generated during user sessions, including navigation patterns, feature usage, and in-app interactions. Device identifiers and technical attributes are gathered, allowing services to recognize user devices across sessions and apps. Location data may be collected when map features are in use.

Third-Party Data Sharing

User data is shared with the following external services:

• Firebase Analytics - Behavioral and usage analytics
• Firebase Crashlytics - Crash and stability reporting
• Firebase Cloud Messaging - Push notification delivery
• Google Maps - Location and mapping features
• MoEngage - Targeted messaging and marketing automation
• Branch.io - Marketing attribution and install tracking
• Qualtrics - In-app surveys and user feedback
• Socure DocV - Identity document scanning and verification
• Daon IdentityX - Biometric identity verification
• Adobe Experience Platform - Behavioral data and marketing analytics
• Segment - Data routing and behavioral analytics
• Datadog RUM - Real-time performance and session monitoring
• LaunchDarkly - Feature configuration management
• Mastercard Open Banking - Financial account connectivity
• ThreatMetrix - Device and behavioral fraud profiling

Understanding the Scores

Positive Security Features

No notable positive security practices were identified in this version of the app.

Areas for Improvement

• The app's network connections provide less protection than expected, meaning user data may not be fully protected when using public Wi-Fi or other untrusted networks.
• User activity and device data are shared with a large number of third-party platforms, including multiple behavioral profiling and marketing services, beyond what core account management typically requires.
• Background device profiling by fraud and identity verification services occurs without visible notice in the app, limiting user awareness of how device data is being used.

About This Analysis

This scorecard reflects findings from automated static analysis of the app's code and configuration. Scores are based on observed data handling practices and security behaviors.

App Details

• App Name: Fidelity Investments
• Package ID: com.fidelity.android
• Version: 4.25 (Build 28419105)
• Scan Date: 2026-02-14