Scan the apps on your device

Check every installed app for trackers, hidden behaviours and risky permissions, and read the result correctly.

You have a privacy score for your device and a list of which installed apps carry trackers, hidden behaviours or risky permissions.

Before you begin

Test Nexus on your Android device.
A Gold subscription. Security Scanner is a Gold feature; without it the screen is an upgrade page.
Nothing else. The scan itself runs on the device — no cable, and nothing is uploaded for analysis.

Open Security Scanner from the App Hub. The Home tab opens on a scan prompt.
To include the apps that came with the phone, turn on Include system apps. These are usually safe but can carry pre-installed trackers.
Tap Start Security Scan and wait for it to finish. The scanner reads the code of each installed app and checks it against a list of known trackers.

The Home tab shows a Privacy Score from 0 to 100, with how many apps were scanned, how many are risky, and how long the scan took.
The score is based on trackers, hidden behaviours, AI SDKs, risky permissions and risky permission combinations.
A higher score means fewer privacy risks across your apps.

Open the Apps tab. Threat Breakdown groups findings into Sneaky behaviors, Trackers, AI/ML SDKs and Permission Combos.
Tap a card to open that category and see the findings with the affected apps listed.
Each category has an explainer card describing what the threat means. Sneaky-behaviour findings additionally carry a HOW IT WORKS section explaining the method.

Tap View All Apps, or any app under Top Threats, to open its details.
Overview lists the code libraries found, each with its origin country and whether it follows GDPR.
Behaviors, Data Flow and Permissions cover hidden behaviours, where data may go, and every permission the app requests.

The scanner reads the code of an app but does not run it, so it cannot see behaviour the app turns on from a server.
Apps that deliberately scramble their code can hide some SDKs.
Data destinations are estimated from the known behaviour of the SDKs found. They are not measured from real network traffic.
The malware check has a small false-positive rate, so a match is something to look into rather than a confirmed result.
For camera, microphone and location the live monitor reports only that the hardware turned on. Android does not name the app.
The scanner cannot delete data, remove permissions or uninstall apps. It points you at the right settings screen and you make the change there.

After the scan the Home tab shows a Privacy Score and a scanned-app count in place of the scan prompt.
Open the Apps tab: Threat Breakdown lists categories, and tapping one shows the apps behind it.