impishparadox if you're using open source apps, reviewing the source code yourself is likely the easiest option (perhaps with some learning curve).
However, if you're truly concerned about Google obtaining your package list or other info, I would suggest avoiding GMS altogether, or at least isolating those services and their dependent apps to a dedicated profile.