You can look at every plugin source to see what it does. Back when I used to do a decent amount of WP stuff I found a bunch that had security holes and hidden tracking.

Most of the big plugins are trustworthy. Just make sure you read their privacy policy.