How to Detect Spyware and Stalkerware on Your Phone: Warning Signs, Hidden Settings, and Clean Removal

Smartphones carry our most intimate secrets—private text messages, bank account details, photo albums, and real-time GPS locations.

Unfortunately, this makes them prime targets for Stalkerware (also known as spouseware or commercial surveillance software). Stalkerware refers to covert monitoring applications secretly installed on your phone by an ex-partner, employer, suspicious roommate, or family member with physical access to your device.

Once installed, these tools can silently record your phone calls, take screenshots, log your keystrokes, intercept WhatsApp chats, and track your GPS coordinates 24/7.

How can you tell if your smartphone is secretly being monitored? And what is the safest way to remove it without losing your personal data? Here is a step-by-step diagnostic guide.

1. How Stalkerware Gets Onto Your Phone

Contrary to movie depictions where a shadowy hacker breaks in from across the globe, 95% of stalkerware requires someone to hold your unlocked phone in their hands for 3 to 5 minutes.

They might ask to borrow your phone to make a quick call or check a map, and then:

• Open a web browser and download a hidden tracking APK (on Android).
• Install an enterprise device management profile (on iOS).
• Hide the app icon from your home screen and grant it unrestricted permissions.

2. The 5 Major Red Flags of Hidden Surveillance

Because stalkerware is constantly recording your screen, accessing your microphone, and transmitting your GPS coordinates to a remote server, it leaves distinct physical fingerprints:

+-------------------------------------------------------------+
|               Physical Signs of Phone Spyware               |
|                                                             |
|   1. Idle Overheating:                                      |
|      Phone feels noticeably warm when sitting untouched.    |
|                                                             |
|   2. Phantom Battery Drain:                                 |
|      Battery percentage plummets by 30-40% while you sleep. |
|                                                             |
|   3. Mystery Data Spikes:                                   |
|      Massive cellular data consumption when you aren't      |
|      watching video or downloading files.                   |
|                                                             |
|   4. Strange Screen Behavior:                               |
|      Screen lights up unexpectedly; device takes a very     |
|      long time to power off or reboot.                      |
|                                                             |
|   5. Flickering Indicator Dots:                             |
|      Green (camera) or orange (mic) dots appear randomly.   |
+-------------------------------------------------------------+

3. How to Check for Hidden Spyware on Android

On Android, malicious surveillance tools often disguise themselves with innocent names like “Device Health”, “System Service”, “Battery Optimizer”, or “Wi-Fi Sync”.

Check 1: Device Admin Apps

Stalkerware frequently grants itself administrative rights to prevent you from uninstalling it:

1. Open Settings > Security & Privacy > More Security Settings.
2. Tap Device Admin Apps (or Phone Administrators).
3. Review the list carefully. Legitimate entries include Find My Device or your antivirus. If you see an unfamiliar app named “System Core” or “Battery Sync”, tap it and choose Deactivate.

Check 2: Accessibility Services

As covered in our Accessibility Security Guide, stalkerware abuses Accessibility to read your screen:

1. Open Settings > Accessibility.
2. Look under Downloaded Apps / Installed Services.
3. If an app you didn’t deliberately install has Accessibility permissions turned ON, turn it OFF immediately.

Check 3: Battery and Data Usage

1. Open Settings > Apps > App Battery Usage.
2. Look for any app consuming 20% or more battery that you haven’t actively used today.

4. How to Check for Hidden Spyware on iPhone

Because of Apple’s strict sandboxing, traditional spyware apps cannot be downloaded from Safari without enterprise certificates or configuration profiles.

Check 1: Configuration Profiles (MDM)

1. Open Settings > General > VPN & Device Management.
2. Look under the Mobile Device Management (MDM) heading.
3. Unless your iPhone was purchased and managed by your corporate employer or school, there should be ZERO configuration profiles listed. If you see a profile you do not recognize, tap Remove Management.

Check 2: Family Sharing & Location Sharing

Sometimes surveillance isn’t complicated malware—it’s just someone secretly enabling location sharing:

1. Open the Find My app and tap the People tab.
2. Verify who can see your live location. Remove anyone you haven’t explicitly approved.
3. Check Settings > [Your Name] > Family Sharing to ensure someone hasn’t added your phone to an unknown family group.

5. The Safest Way to Clean an Infected Device

If you discover stalkerware on your device, do not simply tap uninstall. Stalkerware often alerts the person monitoring you the second the app is removed.

Follow these safety-first steps:

A. Safety Planning First

If you live with an abusive partner or stalker, deleting the app may provoke an immediate confrontation. Before altering the phone, plan a safe place to go or use a trusted friend’s phone to contact local domestic safety hotlines (e.g. thehotline.org).

B. Perform a Clean Encrypted Factory Reset

The only 100% reliable way to eliminate deeply embedded stalkerware is a complete factory reset:

1. Manually backup only essential photos and contacts (do NOT create a full system clone backup, as that can restore the stalkerware!).
2. Go to Settings > System / General > Reset > Erase All Content and Settings.
3. Set up the phone as a new device.

C. Change All Passwords from a Clean Computer

Once your phone is wiped, sit down at a trusted computer and change the passwords for your:

• Apple ID / Google Account
• Primary email inbox
• Social media and messaging apps
• Banking and finance apps

Enable an Authenticator App or Passkey so no one can log back into your accounts even if they know your old passwords.