I’m also curious about this. Would be nice to have some kind of general independent service (or wiki?) similar to consumer reports for cybersecurity.
From the discussion here, it appears that no one is monitoring broadly. The big apps (fb, insta) potentially are being checked as they have bug bounties and warrant research time. But for less popular apps, or pirated apps, it sounds like no one is checking.