Norton360 Antivirus & Security Security & Privacy Scorecard

Android

77
Overall trust score
Acceptable
62
Security
92
Privacy

Usage behavior is tracked by Firebase and Adobe Analytics, and installs and actions are attributed via Singular SDK. Payment data is handled through Stripe. User data is not shared with third-party advertisers, but multiple analytics services monitor how users interact with the app.

Best for

Users comfortable with analytics-backed security tools

Findings

  • 1 critical
  • 2 high
  • 7 medium
  • 3 low
  • 3 info

1 issue identified across security and privacy analysis.

Top security issues

  • Global Cleartext Traffic Enabled in Security Application
  • Hardcoded Encryption Key for Authentication Token Storage
  • Cross-App SSO Token Exposure via Exported RPC Service

Top privacy issues

  • Unencrypted Room Databases Containing Sensitive User Data
  • Pre-Consent Analytics SDK Initialization
  • Advertising ID Collection Without LAT Respect

Full analysis

Norton360 Antivirus & Security

Package: com.symantec.mobilesecurity
Version: 26.2.0.260206117
Scan Date: March 5, 2026

Score Rating
Security 62/100
Privacy 92/100

What This Means for You

Usage behavior is tracked by Firebase and Adobe Analytics, and installs and actions are attributed via Singular SDK. Payment data is handled through Stripe. User data is not shared with third-party advertisers, but multiple analytics services monitor how users interact with the app.

Recommendation: Use With Caution

Best For: Users comfortable with analytics-backed security tools

Key Findings

Data Security - 3 findings (1 high, 2 medium)

Network Security - 4 findings (1 critical, 2 medium, 1 info)

Code Safety - 0 findings

Privacy - 2 findings (2 medium)

Privacy Concerns

What Data is Collected

Firebase Analytics and Adobe Analytics collect behavioral data about how users interact with the app, including which features are used, session duration, and navigation patterns. Singular SDK records attribution data about how the app was installed and the actions taken afterward. Google Play Services and Google Maps SDK contribute device and location signals. Hiya Caller ID SDK processes phone number data to support caller identification features.

Third-Party Data Sharing

User data is not passed to third-party advertising networks. Analytics providers such as Firebase and Adobe Analytics operate as service processors rather than data brokers. Stripe handles payment information under its own data practices and does not share financial data with the app developer for advertising purposes. Avast VPN SDK and Avast Antivirus SDK receive only the data required to perform their specific security functions within the app.

Understanding the Scores

Score Category Score
Security 62/100
Privacy 92/100
Data Security 74/100
Network Security 61/100
Code Safety 87/100
Data Collection 92/100
Data Sharing 100/100
User Control 92/100

Positive Security Features

  • No specific positive security practices were noted for this version.

Areas for Improvement

  • Some of the app's network communications lack the strongest available protections, which means data exchanged during certain operations could be better shielded while in transit.
  • Sensitive information stored locally on the device by the app may not use the most robust available storage protections, which is a concern if the device were physically accessed by someone else.
  • The app integrates multiple analytics services simultaneously. Reducing the number of active behavioral tracking tools would give users clearer information about what is collected and why.

About This Analysis

This scorecard is based on a static code analysis of the app at the version listed below. Findings reflect the app's behavior as shipped, not as configured by individual users.

App Details

Field Value
App Name Norton360 Antivirus & Security
Package ID com.symantec.mobilesecurity
Version 26.2.0.260206117
Scan Date March 5, 2026

Versions & scan history

ScanDateOverall score
#2 (current) 77/100