It probably scans installed apps, settings that could compromise access (for eg USB debugging, bootloader unlocking), apk files in storage, etc all while sending juicy infometrics to an unsecured database