The same way you know whether any other app on your phone is doing that, regardless of whether its codebase is proprietary or GPL: you analyze the binary. Up-and-coming security researchers do this for sport in their spare time.