It is important to note that the tools provided on this site do not guarantee accuracy. Violations are ultimately declared by lawmakers. PoliDroid serves to check for potential violations in order to improve developer and end-user confidence.
If you do not have a compiled APK, the Source Code Analyzer takes source code as an input and automatically cans, in your browser, for potential violations. This method does not analyze the code to see where the data flows. Instead, it is only able to annotate method invocations that are not represented within your code. The Source Code Analyzer suggests phrases to include in your policy to cover these potential violations.