F-Droid, which I'm highlighting in this article, is maintained by a community of open source developers and I'm inclined to trust it. Don't install APK files unless you've done your due diligence ...