1. A method of communicating behavior-analysis information in a mobile device using an application programming interface, comprising: receiving, by a first daemon operating on the mobile device via a mobile device processor of the mobile device, a finite state machine representation from a second daemon operating on the mobile device, the received finite state machine representation including a mapping of features to behavior classifications; receiving, by the first daemon operating on the mobile device and via the application programming interface, a targeted behavior model from the second daemon operating on the mobile device; applying a behavior vector to the received targeted behavior model to generate an analysis result; using the generated analysis result and the received finite state machine representation to determine whether a mobile device behavior may be classified as benign or performance degrading; sending, by the first daemon operating on the mobile device and via the application programming interface, a request to receive more information from a server to the second daemon operating on the mobile device in response to the first daemon determining that the mobile device behavior may not be classified as benign or performance degrading based on the generated analysis result and the received finite state machine representation; and receiving, by the first daemon operating on the mobile device and via the application programming interface, an updated behavior model from the second daemon operating on the mobile device in response to the first daemon sending the request to receive more information from the server to the second daemon.