The apps relied on a second-stage component that was downloaded after the apps were installed.

https://www.zdnet.com/article/fake-android-apps-used-for-targeted-surveillance-found-in-google-play/#ftag=RSSbaffb68