There is no way to guarantee that something hazardous could never be hidden in, or downloaded later. There are too many ways of obfuscating your code, even when viewing the source code.

You can limit what the app has access to, and Apple and Google do this.