Platforms
What security apps can do on Android and iOS
The same subscription delivers different things on each mobile platform, because the platforms grant different access. Knowing which side of that line your device sits on changes what is worth paying for.
People buy mobile security expecting the desktop model: a program that watches the whole machine, inspects every file and quarantines anything suspicious. That model does not transfer cleanly to phones. Both major mobile platforms were designed after that era, and both isolate applications from one another deliberately. A security app on a phone is a guest in the same sandbox as every other app, not a supervisor sitting above them.
The degree of isolation differs, and that difference is the single most useful thing to understand before choosing a product.
The shared foundations
Three mechanisms do most of the work on both platforms, and none of them is sold separately because they are already there.
- Application sandboxing
- Each app runs with its own storage and limited visibility of the rest of the system. One app cannot read another app's data as a matter of course, which is why a malicious app has a much narrower reach on a phone than a malicious program has on an unmanaged desktop computer.
- Curated app distribution
- Apps are normally obtained through the platform's own store, which applies review and can remove an app from devices after the fact. The review is not perfect, but it removes the entire class of problems that comes from downloading an installer from an unknown website.
- Permission prompts
- Access to the camera, microphone, location, contacts, photos and notifications is requested at the point of use and can be withdrawn later in settings. Most privacy problems on a phone are a permission granted once and never revisited, not malware.
Reviewing granted permissions periodically is free and takes a few minutes. The Australian Cyber Security Centre publishes step-by-step guidance for securing personal devices, and it is the right place to start before adding paid software on top.
Where the platforms diverge
| Capability | Android | iOS and iPadOS |
|---|---|---|
| Scanning installed apps and downloaded files | Possible, with permission; this is the traditional antivirus function and it is the main reason the feature is advertised at all | Not available in the conventional sense; the system does not expose other apps' contents to a third-party scanner |
| Installing apps from outside the official store | Possible, and the source of a large share of the risk this software is sold against | Heavily restricted in most markets, which narrows the threat model considerably |
| Filtering web addresses and links | Available, often through a browser extension, a DNS setting or a local VPN profile | Available, usually through a content blocker in Safari or a network-level profile |
| Blocking or screening calls and messages | Available, subject to permissions | Available through the system's designated extension points, in a more limited form |
| Locating, locking or wiping the device | Both the platform service and third-party tools are available | The platform's own service is the practical route; third-party equivalents are limited |
| Password management | Available; works as a normal autofill service | Available; works as a normal autofill service |
What this means if you use Android
Android is where a paid product has the most room to add something. The platform allows software installation from outside the store, which is useful and is also the path most commonly abused. It supports a wider range of hardware from a wider range of manufacturers, which means update support varies: two handsets bought in the same year may be on very different patch levels three years later.
Three checks matter more than the choice of vendor:
- Whether your handset still receives security updates from its manufacturer, and for how much longer. This is stated on the manufacturer's support pages and is worth knowing before your next purchase, not after.
- Whether installation from unknown sources is switched off, which it should be unless you have a specific reason.
- Whether the platform's own built-in app screening is switched on, since some devices allow it to be disabled.
Against that background, a scanner from a security vendor is a reasonable second opinion, particularly on a device that has stopped receiving updates. It does not make an unsupported device current, and no vendor can honestly claim it does.
What this means if you use an iPhone or iPad
On iOS, the conventional scanning feature has little to work with, and a vendor that implies otherwise is overselling. What the platform does permit is useful in a different way: content blocking in the browser, message and call screening, and any features that operate on data rather than on the device, such as a password manager or a notification that an email address has appeared in a published breach dataset.
So the buying question on iOS changes shape. Instead of "does this find viruses", it becomes "do I want a password manager, a link filter and a VPN from this vendor, in one subscription, rather than separately". That is a perfectly reasonable thing to want. It is simply a different purchase from the one the category name suggests.
Tablets are not always included
A licence sold for phones does not automatically extend to tablets, and the feature set on a tablet may differ again. If a family iPad or an Android tablet is part of the reason you are buying, confirm the licence terms cover it before paying rather than after. The TotalAV mobile offer that this site links to is listed by the vendor for both mobile devices and tablets across Android, iOS and Windows — the specifics of what runs where are on the vendor's own pages.
Where an older device sits
The hardest case is a device that still works, still runs the apps its owner needs, and no longer receives operating system updates. Replacing it costs money that people may not have; running it indefinitely accumulates unpatched issues. A practical middle position, rather than a purist one:
Reduce what the device is used for
Move banking and email to a device that is still supported, and keep the older one for calls, messaging, media and navigation.
Remove what is not used
Every installed app is an additional maintenance surface. Uninstalling the ones you have not opened in a year is free and immediate.
Back up properly
Assume the device may need to be wiped at short notice, and make sure nothing irreplaceable exists only on it.
Then consider a scanner
On an unsupported Android device, third-party scanning adds a layer that the platform is no longer updating. Treat it as a mitigation, not a repair.
Signals that a product is being sold beyond its platform
- An iOS feature list that uses the words "scan your iPhone for viruses" without qualification.
- A single feature table with no platform column, or one where the footnotes carry the exceptions.
- A claim that installing the app makes an unsupported device safe again.
- Screenshots showing an interface that only exists on the other platform.
The practical summary
On Android, a paid product can perform the function the category is named after, and is most defensible on devices outside their update window. On iOS, the value sits almost entirely in the bundled extras. In both cases the platform's own maintenance — updates, store-only installs, a screen lock, a backup and reviewed permissions — carries more weight than the subscription does, and costs nothing.
If, after that, a bundle answers a need you actually have, the choosing guide sets out how to work through the purchase, and the features page defines the terms you will meet on the way.
Paid affiliate link: MP DOBRA s.r.o. is paid a commission if you subscribe through it; the price you pay is the same either way.