You can redirect the traffic of your device through a proxy and sniff it (e.g. https://mitmproxy.org/) to determine if an app uses https or not, and furthermore if it performs certificate pinning.