Yahoo Finance: Stocks & News Security & Privacy Scorecard
by Yahoo · iOS
User activity is shared with over ten third-party services, including advertising, analytics, and audience measurement companies. Browsing habits and engagement patterns are used to build a profile that follows users across apps and sites. Users have some control over data settings, but ad tracking is on by default.
Best for
Tracking stocks and markets on the go
Avoid if
You prefer not to be tracked across apps
Findings
- 0 critical
- 2 high
- 3 medium
- 2 low
- 5 info
1 issue identified across security and privacy analysis.
Top security issues
- Extensive Keychain Access Group Sharing
- App Transport Security Enabled (Default HTTPS)
- DeviceCheck App Attest Enabled
Top privacy issues
- Contradictory Location Permission Declaration
- Extensive Cross-App Tracking Infrastructure
- Collection of Phone Numbers for Advertising
Full analysis
Version 26.6.0 (Build 34720) | Scan date: 2026-03-27
What This Means for You
User activity is shared with over ten third-party services, including advertising, analytics, and audience measurement companies. Browsing habits and engagement patterns are used to build a profile that follows users across apps and sites. Users have some control over data settings, but ad tracking is on by default.
Recommendation: Use With Caution
Best For: Tracking stocks and markets on the go
Avoid If: You prefer not to be tracked across apps
Key Findings
Data Security - 2 findings (1 medium, 1 info)
Network Security - 1 finding (1 info)
Code Safety - 0 findings
Privacy - 7 findings (2 high, 2 medium, 1 low, 2 info)
Privacy Concerns
What Data is Collected
Stock watchlist activity, content browsing patterns, article engagement, and in-app behavior are collected and associated with the device profile. Financial interests and reading habits are logged over time.
Third-Party Data Sharing
Data is shared with over ten third-party services:
- Advertising: Google Mobile Ads, Taboola
- Analytics: AppsFlyer, Google Analytics, Firebase Analytics, Chartbeat, ComScore
- Consent Management: Didomi, Google User Messaging Platform
- Community Platforms: OpenWeb
- App Performance Monitoring: EmbraceIO
Understanding the Scores
| Category | Score |
|---|---|
| Security | 98/100 |
| Privacy | 68/100 |
| Data Security | 98/100 |
| Network Security | 100/100 |
| Code Safety | 100/100 |
| Data Collection | 76/100 |
| Data Sharing | 85/100 |
| User Control | 73/100 |
Positive Security Features
- Network communications use modern, secure protocols throughout the app
- The app's code passes rigorous safety checks with a perfect score
- Data handling practices score near-perfect on security measures
Areas for Improvement
- Ad tracking is enabled by default, requiring users to actively seek out privacy settings to limit it rather than opting in on their own terms.
- In-app activity is distributed across multiple advertising and analytics services, with limited visibility into how that data is combined or used downstream.
- Consent options exist but are not prominently surfaced at first launch, making it easy to proceed without reviewing privacy choices.
About This Analysis
This scorecard is generated from automated analysis of the app's installed code. Results reflect the behaviors and data practices observed in the version listed below.
App Details
| Field | Value |
|---|---|
| Package | com.yahoo.finance |
| Version | 26.6.0 (Build 34720) |
| Scan Date | 2026-03-27 |
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 77/100 |