Norton360 Antivirus & Security Security & Privacy Scorecard
Android
Usage behavior is tracked by Firebase and Adobe Analytics, and installs and actions are attributed via Singular SDK. Payment data is handled through Stripe. User data is not shared with third-party advertisers, but multiple analytics services monitor how users interact with the app.
Best for
Users comfortable with analytics-backed security tools
Findings
- 1 critical
- 2 high
- 7 medium
- 3 low
- 3 info
1 issue identified across security and privacy analysis.
Top security issues
- Global Cleartext Traffic Enabled in Security Application
- Hardcoded Encryption Key for Authentication Token Storage
- Cross-App SSO Token Exposure via Exported RPC Service
Top privacy issues
- Unencrypted Room Databases Containing Sensitive User Data
- Pre-Consent Analytics SDK Initialization
- Advertising ID Collection Without LAT Respect
Full analysis
Norton360 Antivirus & Security
Package: com.symantec.mobilesecurity
Version: 26.2.0.260206117
Scan Date: March 5, 2026
| Score | Rating |
|---|---|
| Security | 62/100 |
| Privacy | 92/100 |
What This Means for You
Usage behavior is tracked by Firebase and Adobe Analytics, and installs and actions are attributed via Singular SDK. Payment data is handled through Stripe. User data is not shared with third-party advertisers, but multiple analytics services monitor how users interact with the app.
Recommendation: Use With Caution
Best For: Users comfortable with analytics-backed security tools
Key Findings
Data Security - 3 findings (1 high, 2 medium)
Network Security - 4 findings (1 critical, 2 medium, 1 info)
Code Safety - 0 findings
Privacy - 2 findings (2 medium)
Privacy Concerns
What Data is Collected
Firebase Analytics and Adobe Analytics collect behavioral data about how users interact with the app, including which features are used, session duration, and navigation patterns. Singular SDK records attribution data about how the app was installed and the actions taken afterward. Google Play Services and Google Maps SDK contribute device and location signals. Hiya Caller ID SDK processes phone number data to support caller identification features.
Third-Party Data Sharing
User data is not passed to third-party advertising networks. Analytics providers such as Firebase and Adobe Analytics operate as service processors rather than data brokers. Stripe handles payment information under its own data practices and does not share financial data with the app developer for advertising purposes. Avast VPN SDK and Avast Antivirus SDK receive only the data required to perform their specific security functions within the app.
Understanding the Scores
| Score Category | Score |
|---|---|
| Security | 62/100 |
| Privacy | 92/100 |
| Data Security | 74/100 |
| Network Security | 61/100 |
| Code Safety | 87/100 |
| Data Collection | 92/100 |
| Data Sharing | 100/100 |
| User Control | 92/100 |
Positive Security Features
- No specific positive security practices were noted for this version.
Areas for Improvement
- Some of the app's network communications lack the strongest available protections, which means data exchanged during certain operations could be better shielded while in transit.
- Sensitive information stored locally on the device by the app may not use the most robust available storage protections, which is a concern if the device were physically accessed by someone else.
- The app integrates multiple analytics services simultaneously. Reducing the number of active behavioral tracking tools would give users clearer information about what is collected and why.
About This Analysis
This scorecard is based on a static code analysis of the app at the version listed below. Findings reflect the app's behavior as shipped, not as configured by individual users.
App Details
| Field | Value |
|---|---|
| App Name | Norton360 Antivirus & Security |
| Package ID | com.symantec.mobilesecurity |
| Version | 26.2.0.260206117 |
| Scan Date | March 5, 2026 |
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #2 (current) | 77/100 |