Keep Google Play Protect active on your phone. It scans installed apps for harmful behavior, even if they weren't downloaded from the Play Store.