← All posts

How to tell if there is stalkerware on your phone

It usually starts with something small that does not add up. They mention a street you drove down and never told anyone about. They repeat a line from a message you sent a friend. They call the moment you leave the house, every time. You have probably told yourself it is a coincidence more than once, and you may have started censoring what you type without deciding to.

Stalkerware is the name for apps that let another person quietly watch what happens on your phone: your location, your messages, your call history, your photos, sometimes the microphone. If that is what is happening here, please know two things up front. This is not paranoia, and it is not something you caused by being careless. Almost every one of these apps has to be installed by hand, by someone who had your phone in their hands and knew your passcode.

Read the rest of this on a different device if you can

This is the one thing worth doing before anything else. If there is monitoring software on your phone, then searching for it, reading this page, and calling for help are all things the other person may be able to see. A friend’s phone, a work computer, or a library terminal gives you room to think that your own phone may not.

It is not an overreaction to step away from your device for an hour. It is the same instinct that brought you here, followed one step further.

What actually points to stalkerware

The technical signs are real but unreliable on their own. A battery that drains much faster than it used to, a phone that runs warm while sitting idle, data use that climbs without explanation, restarts you did not ask for, an app or profile in your settings with a dull name like “System Service” that you do not remember installing. Any of these can also be an aging battery or a badly behaved app, which is why chasing them alone tends to leave people more unsettled rather than less.

The stronger signal is behavioral, and you already have it. The National Network to End Domestic Violence puts it plainly: the most common sign that your activity is being monitored is the other person’s own behavior. What do they know that they should not, and where could they possibly have gotten it? Write down the specific instances, with dates, on paper or on a device they cannot reach. Patterns are much easier to see when they are side by side, and that same list becomes useful later if this ever goes in front of an advocate, a lawyer, or a judge.

Do not rip it out yet

This is the part that gets skipped, and it matters more than any detection tip. The FTC and domestic violence advocates both warn that someone who has been monitoring you may escalate when that access suddenly disappears. From their side, a phone going dark looks like a decision you made, and they will know roughly when you made it.

So the order matters. Safety planning comes first, removal comes second. The National Domestic Violence Hotline is free, confidential, and available at 1-800-799-7233 or by texting START to 88788, and their advocates do this specific conversation every day, including the technology side of it. Call from a device that is not the one you are worried about. If there is no abusive relationship in the picture and this is a former friend, a coworker, or a landlord, the escalation risk is usually lower, but the sequence still holds: understand what is there before you change it.

When it is not stalkerware at all

Often it is something simpler, and simpler is good news, because it is easier to fix. Someone who is still signed into your iCloud or Google account can see your location, your photos, and your backups without installing anything. Family location sharing that you set up years ago is still switched on. A shared streaming or phone plan shows travel and call history. An old tablet or a car left logged into your accounts keeps syncing. A tracker tucked in a bag or a car reports location on its own; both iPhone and Android will alert you to an unknown tracker moving with you, so do not dismiss those notifications.

Working through your account access is worth doing regardless, and our guide on locking down an email account someone else has touched covers the sign-out-everywhere and recovery-detail steps that apply just as well here.

Preserve what is there before you clean it up

A factory reset is the reliable way to remove stalkerware, and it is also the moment the evidence disappears. If there is any chance you will want a protective order, a police report, or a civil claim, get the device examined before you wipe it. A forensic examination can establish what was installed, when, and sometimes from which account, in a form that holds up rather than as a screenshot of a suspicion. Our post on preserving evidence in the first 24 hours walks through what to capture and what not to touch, and what to do if someone doxxed you covers documenting an ongoing pattern of harassment.

Cleaning the phone properly

When you have a plan and the evidence question is settled, a full factory reset is the standard fix. Two details decide whether it works. Do not restore from a backup of the old phone, because that can quietly bring the app back with everything else; install your apps fresh from the app store instead. And set the device up on a new Apple or Google account, not the old one, since an account the other person still has credentials for undoes the reset entirely.

Then close the door behind you. A six-digit passcode or longer that nobody else knows, biometrics turned on, automatic updates enabled, two-factor authentication on your email and your Apple or Google account, and new passwords everywhere the old ones may have been seen. If a new phone is realistic, one bought on an account they have never had access to is the cleanest possible start.

You are allowed to act on a hunch

You do not need proof before you take your own privacy back. Changing your passcode, leaving the phone in another room, or setting up a device they have never touched are all reasonable things to do while you are still working out what is happening. If it turns out to be nothing technical, you have lost very little. If it turns out to be something, you will be glad you started early.

— Gus