Malwarebytes Mobile Security Security & Privacy Scorecard

Android

60
Overall trust score
Use With Caution
65
Security
55
Privacy

App usage and behavior is tracked by AppsFlyer and Amplitude for marketing and analytics purposes. Firebase collects performance and session data, and Sentry captures crash details from the device. Subscription activity is shared with RevenueCat and Iterable for marketing communications.

Best for

Users comfortable with analytics tracking their usage

Avoid if

You prefer tools that don't share data with marketers

Findings

  • 0 critical
  • 0 high
  • 0 medium
  • 0 low
  • 0 info

0 issues identified across security and privacy analysis.

Top security issues

  • Hardcoded VPN API Static Authentication Token
  • Unencrypted Apollo GraphQL Cache May Store Authentication Tokens
  • Sentry View Hierarchy PII Risk

Top privacy issues

  • Extensive Third-Party Tracking in Privacy-Focused Application
  • Sentry View Hierarchy PII Risk
  • Cross-SDK User ID Correlation

Full analysis

Malwarebytes Mobile Security

org.malwarebytes.antimalware | Version 5.20.0+505 | Scanned: 2026-02-01

What This Means

App usage and behavior is tracked by AppsFlyer and Amplitude for marketing and analytics purposes. Firebase collects performance and session data, and Sentry captures crash details from the device. Subscription activity is shared with RevenueCat and Iterable for marketing communications.

Recommendation: Use With Caution

Best For: Users comfortable with analytics tracking their usage

Avoid If: You prefer tools that don't share data with marketers

Key Findings

Data Security - 4 findings (1 high, 1 medium, 2 info)

Network Security - 1 finding (1 critical)

Code Safety - 0 findings

Privacy - 3 findings (2 high, 1 medium)

Privacy Concerns

What Data is Collected

  • App usage patterns and in-app behavior collected by AppsFlyer and Amplitude
  • Performance metrics, session activity, and app health data collected by Firebase
  • Crash details and device diagnostics collected by Sentry and Firebase Crashlytics

Third-Party Data Sharing

  • AppsFlyer - Usage and install behavior is shared for marketing attribution
  • Amplitude - In-app actions are shared for analytics and product decisions
  • RevenueCat - Subscription and purchase activity is shared for billing management
  • Iterable - Subscription status is shared for marketing communications

Understanding the Scores

Category Score
Security 65/100
Privacy 55/100
Data Security 75/100
Network Security 50/100
Code Safety 100/100
Data Collection 60/100
Data Sharing 65/100
User Control 100/100

Positive Security Features

  • Code Safety rated 100/100, indicating no detected unsafe coding patterns in the app
  • User Control rated 100/100, giving users full authority over app permissions on the device
  • Local data on the device is protected using encrypted storage

Areas for Improvement

  • The app shares data with a higher-than-expected number of marketing and analytics services for a security-focused tool
  • Network communication practices could be strengthened to better protect data moving between the app and external services
  • Data collected by third-party analytics partners extends beyond what is needed to deliver the app's core protection features

About This Analysis

This scorecard is based on static analysis of the app's code and observed behaviors. Scores reflect practices at the time of the scan and may not capture every possible risk or subsequent updates.

App Details

  • App Name: Malwarebytes Mobile Security
  • Package ID: org.malwarebytes.antimalware
  • Version: 5.20.0+505 (build 52000505)
  • Scan Date: 2026-02-01
  • Analysis Platform: canITrustThat

Versions & scan history

ScanDateOverall score
#1 (current) 60/100