1. A method for use with a first mobile device application (first app) suitable for running on devices of at least a first device type, the method comprising: collecting first-device-type risk-relevant data associated with a first app from a first plurality of devices, with each device of the first plurality of devices being of the first device type; analyzing the first-device-type risk-relevant data to generate first-device-type risk characteristic data corresponding to the first device type; associating the first-device-type risk characteristic data as first risk metadata with the first app; collecting, for each device type of a set of device type(s) corresponding to the app, device-type-specific risk-relevant risk data associated with the app and a respective device type; analyzing, for each device type of the set of device type(s) corresponding to the app, a respectively corresponding device-type-specific risk-relevant data to generate respectively corresponding device-type-specific risk characteristic data associated with the app and the respective device type; and associating, for each device type of the set of device type(s) corresponding to the app, the respectively corresponding device-type-specific risk characteristic data as device-type specific risk metadata with the app; wherein: the first app is one of a plurality of apps that is used by members of an enterprise; and each app of the plurality of apps is suitable for running on a respectively corresponding set of device type(s).