Lookout categorizes applications based on various capabilities which contribute to the level of risk.The table below summarizes the severity of all capabilities and permissions that may be present in an app.

• None: The capability does not interact with a user's personal data.
• Normal: The capability has limited interaction with user data, such as files on local storage.
• Elevated: The capability can be used to identify a user's device or location, or to access their calendar, contacts, or media files.
• Critical: The capability exposes a user's personal data and may be used to access audio or video inputs, or to extract sensitive information from the clipboard.