You should have been given the Provider ID by your service provider or IT department.
The scan is a non-invasive scan and does not write any information to your phone. It also does not gather private information, such as contact data or email.
A report is presented after the scan showing potential issues and security risks. Some risks are acceptable as some apps require potentially dangerous permission to perform their operation. You should always try to minimize the use of apps that require potentially harmful permissions. Only use apps from known sources. Uninstall unrecognized apps or apps requiring permissions that are not needed for their primary function.