AndyN tracking code can be added to apps but if you download it from some unknown sketchy source, coz it’s on play Store and Google’s policies are quite strict when it comes to apps that work around sensetive info like phone app, password manager etc., so there is nothing to worry with this one.
But if you are downloading an app that’s ‘open source’ via ‘github’, ‘f-droid’ etc., then you can check the source code to know if they are any tracks embedded or not if you know a bit of coding
This one’s safe don’t worry