The risky behaviors identified by the company are related to the type of data that's collected, and where the data is going, not outright malware risks. According to Appthority's App Reputation Report for the summer of 2014, most apps collect information on the user's location, they access the address book and the calendar, they identify the user based on the device's IMEI or UDID, and they're capable of performing in-app purchases. The collected data can go to ad networks, social networks, third-party analytic frameworks, third-party crash reporting SDKs, and public cloud file storage providers.
According to the study, 99% of the most popular free Android and iOS apps exhibit at least one type of behavior that poses a security or privacy threat to organizations. When it comes to paid software, a lower percentage of apps have at least one of the top ten risky behaviors identified by Appthority, but the difference is small (78% for Android and 87% for iOS), with location tracking named the biggest disparity between free and paid applications.
SecurityWeek/ Full Article Here/ http://www.securityweek.com/most-top-free-and-paid-mobile-apps-pose-threat-enterprises-report