The security report also confirms that Google is tracking apps via Verify Apps, a feature that scans all apps on your device regardless of where they come from. Google claims these scans only collect data needed to provide and improve device security, and that a full device scan is performed about once a week. Verify Apps has existed for a few years but last year Google expanded the project to scan all apps regardless where they come from.
“Google’s systems use machine learning to see patterns and make connections that humans would not,” Google explains. “Google Play analyzes millions of data points, asset nodes, and relationship graphs to build a high-precision security-detection system.”If you don't want Google to do this, you can turn the feature off by going to Settings -> Security and tapping the button labeled “Scan device for security threats.”
Verify Apps has been active for a few years, but it was in 2014 that Google added the Safety Net, which scans all apps regardless of where they come from. Google says that full device scans run about once a week, and by the end of 2014, well over 200 million devices were being scanned every day.