Sideloading an app is easy. Trusting it is the hard part. My phone holds my bank, my mail, and my family photos.
First, I check the source page. A clean page shows the version, the size, and the update date. A messy page hides all three.
Second, I compare the file name. It should match the app name exactly. Extra words in the file name are a bad sign.
For APK Netfly download pages and version notes, I read the details at Netfly before I tap install. The page lists what changed in each version.
Third, I scan the file after download. My antivirus gets the first look. Only then does the installer open.
Last, I check permissions after install. A flashlight app needs no contacts. If the list looks wrong, the app goes.

