# Security & Privacy Scorecard

## Scotiabank Mobile Banking

**Version:** 2508.0.0 (build 212)  
**Platform:** Android  
**Analyzed:** February 16, 2026

**Security Score:** 82/100    **Privacy Score:** 78/100

## What This Means for You

Device behavior and session activity is analyzed by fraud-detection services to verify identity. Adobe and Firebase collect usage data, and interactions are monitored to personalize the in-app experience. Integrated third parties include Interac, Western Union, and TransUnion for financial features.

## Recommendation: Trustworthy

**Best For:** Scotiabank customers banking on the go

## Key Findings

**Data Security** - 0 findings

**Network Security** - 2 findings (2 info)

**Code Safety** - 0 findings

**Privacy** - 3 findings (1 high, 1 medium, 1 low)

## Privacy Concerns

### What Data is Collected

The app collects behavioral signals from the device, including touch patterns, typing rhythm, and session timing, to support fraud detection and identity verification. Usage analytics are gathered by Adobe Experience Cloud and Firebase, covering screens visited, features used, and session duration. Device identifiers and interaction history may also be retained to personalize the in-app experience.

### Third-Party Data Sharing

BioCatch and ThreatMetrix receive behavioral and device signals to assess fraud risk during sessions. Adobe Experience Cloud and Firebase receive usage and interaction data for analytics and personalization. Acuant and Top Image Systems receive document images to support identity verification flows. Western Union, Interac, and TransUnion receive financial data to facilitate transfers, payments, and credit-related features. Scene+ and Personetics receive transaction and preference data to support rewards and financial insights. OneTrust is used for consent and privacy preference management.

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 82/100 |
| Privacy | 78/100 |
| Data Security | 85/100 |
| Network Security | 98/100 |
| Code Safety | 80/100 |
| Data Collection | 75/100 |
| Data Sharing | 90/100 |
| User Control | 82/100 |

## Positive Security Features

- Network communication received a near-perfect score of 98/100, reflecting strong practices for protecting data as it travels between the device and the bank's servers.

## Areas for Improvement

- Multiple behavioral profiling services monitor how users interact with the device. Reviewing the app's privacy settings and the linked privacy policy can help users understand what is retained and for how long.
- Third-party analytics services receive data about in-app activity, which may contribute to profiles of banking behavior beyond what is needed for core app functionality.
- The range of identity and financial data shared with services such as TransUnion warrants a closer look at the consent options available within the app's settings.

---

## About This Analysis

This scorecard is produced through automated analysis of the app's code and configuration. Scores and findings reflect the security and privacy posture of the version examined and may change as the app is updated.

### App Details

- **Package ID:** com.scotiabank.banking
- **Version:** 2508.0.0 (build 212)
- **Platform:** Android
- **Scan Date:** February 16, 2026