# Security & Privacy Scorecard

## com.yahoo.finance

Version 26.6.0 (Build 34720) | Scan date: 2026-03-27

## What This Means for You

User activity is shared with over ten third-party services, including advertising, analytics, and audience measurement companies. Browsing habits and engagement patterns are used to build a profile that follows users across apps and sites. Users have some control over data settings, but ad tracking is on by default.

## Recommendation: Use With Caution

**Best For:** Tracking stocks and markets on the go
**Avoid If:** You prefer not to be tracked across apps

## Key Findings

**Data Security** - 2 findings (1 medium, 1 info)

**Network Security** - 1 finding (1 info)

**Code Safety** - 0 findings

**Privacy** - 7 findings (2 high, 2 medium, 1 low, 2 info)

## Privacy Concerns

### What Data is Collected

Stock watchlist activity, content browsing patterns, article engagement, and in-app behavior are collected and associated with the device profile. Financial interests and reading habits are logged over time.

### Third-Party Data Sharing

Data is shared with over ten third-party services:

- **Advertising:** Google Mobile Ads, Taboola
- **Analytics:** AppsFlyer, Google Analytics, Firebase Analytics, Chartbeat, ComScore
- **Consent Management:** Didomi, Google User Messaging Platform
- **Community Platforms:** OpenWeb
- **App Performance Monitoring:** EmbraceIO

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 98/100 |
| Privacy | 68/100 |
| Data Security | 98/100 |
| Network Security | 100/100 |
| Code Safety | 100/100 |
| Data Collection | 76/100 |
| Data Sharing | 85/100 |
| User Control | 73/100 |

## Positive Security Features

- Network communications use modern, secure protocols throughout the app
- The app's code passes rigorous safety checks with a perfect score
- Data handling practices score near-perfect on security measures

## Areas for Improvement

- Ad tracking is enabled by default, requiring users to actively seek out privacy settings to limit it rather than opting in on their own terms.
- In-app activity is distributed across multiple advertising and analytics services, with limited visibility into how that data is combined or used downstream.
- Consent options exist but are not prominently surfaced at first launch, making it easy to proceed without reviewing privacy choices.

---

## About This Analysis

This scorecard is generated from automated analysis of the app's installed code. Results reflect the behaviors and data practices observed in the version listed below.

### App Details

| Field | Value |
|---|---|
| Package | com.yahoo.finance |
| Version | 26.6.0 (Build 34720) |
| Scan Date | 2026-03-27 |