The CNIL publishes a Toolkit for software developers, including advice such as "take time to audit your 3rd party SDKs". It's in French, but there are a couple of good automated translation services out there. Check it out:

Sign in to participate in the conversation
La Quadrature du Net - Mastodon - Media Fédéré

The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!