And (probably not only) on Google Play, these labels are often nothing but a farce – see e.g. https://foundation.mozilla.org/de/campaigns/googles-data-safety-labels/ (TL;DR: those data are provided by the app authors/vendors voluntarily – and they are often not really "interested" in making them public; Google does not verify them but even explicitly states it's not their responisbility). 🤷‍♂️

So on Android, there are (basically) two kind of sources: the intransparent Play Store – and #FDroid 👆