Tech – Page 2 – Infurpose — Phone Privacy & Security Guides

Quick answer: Stalkerware is monitoring software that someone secretly installs on your phone to watch your messages, calls, location, photos, and activity without your knowledge or consent. If you think it's on your device, don't rush to uninstall it — read the safety note further down first. This Infurpose guide walks you through what stalkerware is, how to spot it on an iPhone or Android, and what to do without putting yourself at risk. What Is Stalkerware, Exactly? Stalkerware is commercial monitoring software that lets another person secretly track almost everything you do on your phone — your texts, calls, GPS location, photos, and which apps you open — without you ever knowing. The Coalition Against Stalkerware, a group of security companies and domestic violence advocates, defines it as software that enables someone to secretly spy on another person's private life through their mobile device. You'll sometimes hear it called "spouseware" or "creepware," and those nicknames tell you who usually uses it. These apps are often marketed as harmless parental or employee monitoring tools, but they're frequently turned against adults — by a controlling partner, an ex who won't let go, or a family member. According to Kaspersky's State of Stalkerware 2023 report, roughly 31,000 people worldwide were affected by stalkerware that year, and that figure only counts the cases that security software actually caught. The real number is almost certainly higher. The reason stalkerware is so unsettling is that it hides in plain sight. Once installed, most of these apps remove their own icon and run silently in the background, which is exactly why so many people at Infurpose write to us unsure whether their gut feeling is paranoia or a real problem. Usually, that feeling is worth taking seriously. Stalkerware vs. Spyware vs. "Find My" — What's the Difference? Stalkerware is a specific type of spyware installed by someone you know who has physical access to your phone, which sets it apart from criminal malware or a consent-based feature like Find My iPhone. Getting these three straight helps you understand what you're actually dealing with. Stalkerware is installed deliberately by someone close to you — usually after holding your unlocked phone — and is designed to stay hidden and monitor you without consent. Spyware and malware generally come from a stranger or criminal, often through a malicious link or download, and aim to steal data or money rather than track one specific person. Legitimate monitoring, like Apple's Find My or Google Family Link, is visible on the device and set up with the knowledge of the person being located. Here's the gray area worth understanding: a parental control app isn't stalkerware when a parent uses it openly on a minor's phone. It becomes stalkerware the moment it's hidden, or used to secretly monitor another adult without their agreement. How Does Stalkerware Get on Your Phone? Almost all stalkerware needs someone to physically hold your unlocked phone for a few minutes to install it, which is the biggest reason it's usually someone close to you rather than a faraway hacker. If a person knows your passcode and can pick up your device while you're asleep or in the shower, that's all the access most of these apps require. The method differs by platform. On Android, someone typically enables installation from "unknown sources," sideloads the app, and grants it sweeping Accessibility and Device Admin permissions so it can read your screen and messages. On iPhone, a dedicated hidden app is harder to install, so abusers more often rely on knowing your Apple ID and password — that alone lets them see your iCloud photos, messages, and location from their own device, no app required. When I test monitoring apps on a loaner Android phone at Infurpose, what stands out is the speed: a determined person can install and hide one of these apps in the time it takes to make a cup of coffee. That's not meant to scare you — it's meant to explain why physical control of your phone and a passcode only you know matter so much. From experience: The red flag I trust most isn't some exotic hidden app — it's a normal-looking one being misused. Find My, Google location sharing, a family phone-plan tool, or a parental-control app quietly switched on does more real-world damage than rare "spy" software. Cornell's Clinic to End Tech Abuse reports the same pattern: dedicated hidden spyware usually isn't what they find — ordinary "dual-use" apps are. In their data, monitoring through apps or stalkerware was reported by roughly 20% of female and 25% of male victims, with GPS and app-based location tracking among the most common methods. Signs Stalkerware May Be on Your Phone (iPhone and Android) The most common warning signs are faster-than-usual battery drain, unexpected spikes in data usage, the phone feeling warm when you're not using it, and — the biggest red flag of all — someone knowing things about your day that they shouldn't. On their own, any of these can have an innocent explanation, but several together deserve a closer look. Battery drains quickly even when you've barely touched the phone. The phone runs warm or the data usage climbs for no clear reason, since monitoring apps constantly upload your activity. Unfamiliar apps, profiles, or settings you don't remember installing or changing. The screen lights up at night or the phone reboots on its own. On an iPhone, check Settings for any Configuration Profiles you didn't add, look at whether an unexpected device is signed into your Apple ID, and be suspicious if the phone has been jailbroken. On Android, look for "Install unknown apps" being switched on, apps with Accessibility or Device Admin access you didn't grant, and icons that seem to be missing or disguised as something boring like "System Service." One honest caveat: the absence of these signs doesn't guarantee your phone is clean. Good stalkerware is built to be quiet. If your instincts are still telling you something is wrong, keep going. Important: Your Safety Comes First If the person who may be monitoring you could be abusive or controlling, do not remove the stalkerware yet — suddenly cutting off their access can escalate the danger. This is the single most important part of this entire guide, so please don't skip it. An abuser who relies on stalkerware to keep tabs on you may react badly the moment their "eyes" go dark. Removing the app, changing a password, or even letting them see you searching for help can provoke exactly the escalation you're trying to avoid. Before you touch anything, make a plan. Use a safe device — a friend's phone, a library computer, or a work computer the other person can't access — to look up help. Reach out to trained advocates. In the U.S., the National Domestic Violence Hotline (thehotline.org or 1-800-799-7233) and the Coalition Against Stalkerware can help you plan safely. Document what's happening if you can do so safely, and consider involving a domestic violence advocate or law enforcement before removing evidence. Your physical safety matters more than any app on your phone. Everything else in this guide can wait until you've thought that part through. What to Do If You Find Stalkerware Once you're confident it's safe to act, your options are to update your phone's operating system, run a reputable security scan, remove suspicious apps and profiles, change every password from a clean device, and — if needed — perform a full factory reset. Work through them in a sensible order rather than panicking and wiping everything at once. Update your operating system. A major iOS or Android update often breaks stalkerware, since these apps depend on specific system loopholes. In my testing, an OS update alone frequently disables a monitoring app. Run a trusted mobile security app. Reputable scanners like Malwarebytes can flag many monitoring apps, giving you a concrete place to start. Remove unknown profiles and admin apps you identified in the signs section above. Change your passwords from a safe device — especially your Apple ID or Google account — and turn on two-factor authentication so a stolen password isn't enough on its own. Factory reset as a last resort. A clean reset removes nearly all stalkerware, but only if you set the phone up fresh and avoid restoring an old backup that might quietly reinstall the app. For step-by-step help, Infurpose has detailed guides on finding and removing spy apps and on securing your phone accounts with 2FA — both are good next reads once you're safe. Is Stalkerware Illegal? Secretly monitoring another adult without their consent is illegal in most U.S. jurisdictions and can break federal and state wiretapping, computer fraud, and stalking laws. The picture has two sides worth understanding. Selling monitoring software isn't automatically illegal, and many of these apps market themselves as legitimate parental or employee tools. But covertly using that software to track an adult who hasn't agreed to it is a different matter, and it's where the law tends to come down hard. The Federal Trade Commission has taken enforcement action against stalkerware companies for enabling secret surveillance. None of this is legal advice — if you believe you're a victim, an advocate or attorney can help you understand the specific laws where you live. How to Protect Your Phone From Stalkerware The best defense is to lock your phone with a strong passcode only you know, keep the software updated, turn on two-factor authentication, and never share your Apple ID or Google password with anyone. Stalkerware depends on access, so closing off access is what stops it. Set a passcode or biometric lock that no one else knows, and change it if someone might have learned it. Never share account passwords, even with a partner — a shared Apple ID or Google login is the easiest backdoor of all. Turn on two-factor authentication for your main accounts so a password alone can't unlock your data. Review app permissions periodically and keep an eye on who has physical access to your phone. Keep your operating system current, since updates quietly close the gaps stalkerware relies on. For a deeper walkthrough, Infurpose's iPhone and Android privacy settings guides show you exactly which switches to flip. To scan for and remove hidden spyware, a mobile security app like Bitdefender Mobile Security on Amazon can flag malicious apps that are easy to miss by hand. Frequently Asked Questions What is stalkerware in simple terms?Stalkerware is an app someone secretly installs on your phone to spy on your messages, calls, location, and activity without your permission. It's usually installed by someone who knows you and had physical access to your device. Can stalkerware be installed without touching my phone?On Android it almost always needs brief physical access to install an app. On iPhone, someone with your Apple ID and password can monitor your iCloud data — messages, photos, and location — remotely without any app, which is why changing that password matters so much. Will a factory reset remove stalkerware?Yes, a full factory reset removes stalkerware in nearly all cases — but only if you set the phone up fresh and don't restore an old backup that could reinstall it. Change your account passwords from a safe device afterward. Does antivirus detect stalkerware?Reputable mobile security apps can detect many stalkerware and monitoring apps, though some are built to hide well. A scan is a smart first check, but pair it with reviewing app permissions and account logins. Is it safe to just delete the stalkerware app?Not always. If the person monitoring you could be abusive, deleting it may alert them and escalate the situation. Make a safety plan first and consider contacting the National Domestic Violence Hotline before removing anything. The Bottom Line Three things are worth remembering. First, stalkerware is almost always installed by someone close to you who had physical access to your phone — not a distant hacker. Second, if there's any chance the person is abusive, safety planning comes before removal; reach out to trained help from a safe device first. Third, a strong passcode, two-factor authentication, private account passwords, and regular updates are your most reliable long-term defense. If reading this confirmed a worry you've been carrying, you're not overreacting for taking it seriously. Explore Infurpose's guides on finding and removing spy apps and locking down your accounts to take back control of your phone, one step at a time. Written by Samuel Smith, Consumer Technology Writer & Digital Privacy Researcher at Infurpose. This article is for general information and is not legal advice.