Nah should be ok as long as it's coming from Google play store. I get Huawei backup, clone, hisuite pushed by them and all of them are installed from play store.
In the notification panel? Those should always show which app is responsible. If your phone's interface doesn't show the app responsible, then try long-pressing the notification and then App Info.
Or are you talking about toast notifications that show up in the middle of the screen?