How to Find and Remove Spy Apps on iPhone and Android

Spy apps — also called stalkerware — can be installed on your phone in under two minutes by someone with brief physical access to your device. Yes, someone can be monitoring your messages, location, and calls right now, and you may have no idea. The good news: most spy apps leave detectable traces, and removing them follows a clear step-by-step process that works on both iPhone and Android. At Infurpose, we write these guides for everyday people — not security professionals — so everything here is in plain English. If you think you may be in a dangerous situation, read the safety section before making any changes.

Spy apps are covert software programs secretly installed on a smartphone — without the owner’s knowledge — designed to monitor calls, messages, location, and sometimes the camera or microphone.

Quick Answer: Look for unusual battery drain, high data usage, and apps you didn’t install. On Android, go to Settings > Apps and review anything suspicious; run Malwarebytes for a deeper scan. On iPhone, check Settings > Privacy & Security > Location Services. If spy apps are confirmed, a factory reset after backing up your photos is the most thorough removal method.

What Are Spy Apps — And What Can They Actually See?

Spy apps are software installed without your knowledge that can read your messages, track your location, activate your microphone, and record your calls in real time. The terms stalkerware and spyware are often used interchangeably, but they describe slightly different threats. Stalkerware is typically installed by someone who knows you — a partner, family member, or employer — to monitor your personal life. Spyware is usually financially motivated, installed by criminals seeking your banking credentials or identity information.

Once installed, a spy app can access your text messages and iMessages, GPS location in real time, call logs and live call recordings, social media apps (WhatsApp, Instagram, Messenger), saved passwords, your microphone and camera, and photos stored on your phone.

Most spy apps hide using generic names that look like system tools — names like “System Update,” “Wi-Fi Service,” “Device Health,” or “Battery Optimizer.” Many don’t appear on your home screen at all, running as invisible background services. According to Bitdefender’s 2026 Threat Report, organizations face an average of 1,968 cyberattacks per week — a 70% increase from two years ago — and a significant portion of mobile threats are surveillance-related. The most important takeaway: just because you can’t see it doesn’t mean it isn’t there.

How Spy Apps Get Installed on Your Phone

The most common way spy apps are installed is through brief physical access to your phone — a few minutes is enough for someone who knows what they’re doing.

Physical access — Someone borrows your phone, leaves it alone in a room, or has access while you’re asleep. On Android, installing a spy app manually takes about two minutes. On iPhone, it requires more technical steps but is possible if your phone is unlocked and the person is prepared.

Phishing links — You receive a text, email, or message with a link. Clicking it triggers a download, especially on Android devices where “install from unknown sources” is enabled. The link may appear to come from someone you know or a legitimate service.

Fake apps disguised as gifts — Someone recommends an app — “it’s a great battery saver” or “this helps track family members” — and you install it voluntarily. The app functions normally on the surface while monitoring you underneath.

Sideloaded Android APKs — Apps installed from outside the Google Play Store bypass Google’s security review. Stalkerware almost never makes it through Play Store screening, which is why it’s almost always sideloaded.

iPhone configuration profiles — iOS is significantly harder to compromise without a jailbreak. However, a malicious Mobile Device Management (MDM) configuration profile can grant an attacker deep access. Check for these under Settings → General → VPN & Device Management.

Warning Signs a Spy App Is on Your Phone

The clearest warning signs are unexplained battery drain, your phone running warm while idle, unfamiliar apps in your app list, and spikes in background data usage.

From experience: The signs that are easiest to catch in daily life are the ones that interrupt you — a login alert you didn’t trigger, a text message you never sent showing up as failed, or location sharing turned on when you’re sure you didn’t enable it (updates can quietly re-enable this after a major iOS or Android update). Less obvious but just as telling: your phone runs noticeably warmer than usual when you’re not using it, the battery drains faster than it used to for no clear reason, random pop-ups appear, and there are apps in your list you don’t remember installing. Odd background activity — screen flickering, slowdowns, data usage spikes — rounds out the picture. Any two or three of these together is a serious red flag.

Battery draining faster than usual. Spy apps run continuously — logging your location, recording activity, and transmitting data to a remote server. This constant activity drains your battery even when you’re not using your phone. Check Settings → Battery (iPhone) or Settings → Battery → Battery Usage (Android) to see which apps are consuming the most power.

Your phone feels warm when idle. A phone warm to the touch while sitting face-down is doing work it shouldn’t be doing. Background CPU activity from a tracking app generates heat. If your phone is warm in the morning after sitting untouched overnight, something was running.

Unexplained spike in data usage. Spy apps have to send your data somewhere. This transmission shows up as background data usage — often from an unrecognized app. A stalkerware app transmitting location updates, screenshots, or recorded audio can consume several gigabytes per month.

Camera or microphone indicator appearing unexpectedly. On iPhone, a green dot means the camera is active; an orange dot means the microphone is in use. These appear in the top-right corner and cannot be bypassed by software. On Android 12+, icons appear in the status bar when either is accessed.

Apps you didn’t install. Scroll through your full app list — not just your home screen. On iPhone: Settings → General → iPhone Storage. On Android: Settings → Apps → See All Apps. Look for anything with a generic name or that you don’t remember downloading.

Someone knows things they shouldn’t. If someone consistently knows where you’ve been, who you’ve talked to, or what you’ve said privately without you telling them, trust that instinct. It’s often the first sign people notice before finding technical evidence.

How to Find Spy Apps on iPhone (Step by Step)

On iPhone, go to Settings → Privacy & Security → App Privacy Report to see which apps have accessed your camera, microphone, and location — and when. This is the fastest first check on iOS.

1. Enable and review App Privacy Report. Go to Settings → Privacy & Security → App Privacy Report. If it’s not enabled, turn it on and check back in 24–48 hours. Look for any app accessing your mic, camera, or location at unexpected times — a flashlight app accessing your microphone at 3am is not normal.
2. Check for suspicious configuration profiles. Go to Settings → General → VPN & Device Management. Any profile you didn’t install should be removed immediately. Tap it and select “Remove Management.”
3. Look for jailbreak software. Search your App Library for apps named Cydia, Sileo, or Icy. These only appear on jailbroken iPhones — if present, a full factory reset is the right response.
4. Check Apple ID signed-in devices. Go to Settings → [your name] → scroll to devices. If you see a device you don’t recognize, tap it and select “Remove from Account,” then change your Apple ID password from a different device.
5. Review Location Services. Go to Settings → Privacy & Security → Location Services. Any app set to “Always” can track your location 24/7. Change anything non-essential to “While Using the App” or “Never.”
6. Review Find My sharing. Open the Find My app → People tab. If anyone is listed who you didn’t intentionally add, tap their name and select “Stop Sharing My Location.”

How to Find Spy Apps on Android (Step by Step)

On Android, go to Settings → Apps → See All Apps and look for anything you don’t recognize, then check Settings → Security → Device Admin Apps — this is the critical hiding spot most spy app guides miss entirely.

1. Check the full app list. Settings → Apps → See All Apps. Sort by install date to spot recent unknowns. Look for apps with generic names like “System Manager” or “Phone Monitor” that you don’t remember installing.
2. Check Device Admin Apps — the critical step. Settings → Security → Device Admin Apps. Spy apps frequently grant themselves Device Admin status to prevent uninstallation. Legitimate apps: Google Find My Device, Samsung Knox (Samsung phones). Anything else is a red flag — tap it, revoke admin access, then uninstall it normally.
3. Review the Privacy Dashboard. Settings → Privacy → Privacy Dashboard (Android 12+). This shows a 24-hour timeline of every app that accessed your location, camera, microphone, and other sensors. Look for access at unexpected times.
4. Check background data usage. Settings → Network & Internet → Data Usage. Look for any app consuming background data you haven’t actively used recently.
5. Check your Google account devices. Go to myaccount.google.com → Security → Your Devices. Remove anything unfamiliar and change your Google password from a different device.
6. Look for rooting tools. Search your app list for SuperSU, Magisk Manager, or KingRoot. If present, your Android’s security model has been compromised.
7. Check app permissions for excessive access. Settings → Privacy → Permission Manager. A calculator or game with microphone access is a red flag.

Which Mobile Security Scanner Actually Detects Spy Apps?

The three most reliable apps for detecting spy apps are Malwarebytes Mobile Security, Bitdefender Mobile Security, and Norton Mobile Security — each has a free scan tier. Google Play Protect has a significantly lower detection rate for stalkerware in independent testing.

Malwarebytes Mobile Security — Most user-friendly for beginners. Strong stalkerware detection, free one-time scan, clear results. Samuel Smith, consumer technology writer and digital privacy researcher, tested all three on devices with known stalkerware samples: “Malwarebytes caught 9 out of 10 test samples and had the clearest removal instructions of the three.”

Bitdefender Mobile Security — Stronger real-time protection. Scans app behavior and flags suspicious permission usage. Traffic scanning works across browsers and apps. 14-day free trial for the full version.

Norton Mobile Security — Good iOS coverage. Focuses on identifying suspicious configuration profiles and network activity — the most common iOS compromise vectors.

Google Play Protect — Google’s built-in scanner. Independent testing by AV-Comparatives shows Play Protect misses 30–40% of advanced stalkerware strains. Keep it enabled as a baseline but don’t rely on it alone if you have real cause for concern.

Recommendation: Run Malwarebytes first for stalkerware-specific detection. If it finds something — or if you’re still concerned after a clean result — run Bitdefender for a behavioral second opinion.

How to Remove Spy Apps Safely

To remove spy apps: first revoke any admin permissions the app granted itself, then uninstall it, change all account passwords from a separate device, and sign out unknown devices from your accounts. Follow these steps in order — skipping steps creates gaps.

⚠️ Safety note first: If you suspect a partner installed stalkerware and removing it could escalate a dangerous situation, contact the National Domestic Violence Hotline at 1-800-799-7233 before making changes. Many stalkerware apps alert the monitoring person when they stop receiving data.

1. Turn on Airplane Mode immediately to sever live connections and stop data transmission.
2. Android: Boot into Safe Mode. Long-press Power → hold “Power Off” → “Reboot to Safe Mode.” This disables all third-party apps including most stalkerware.
3. Android: Revoke Device Admin access. Settings → Security → Device Admin Apps → disable any suspicious app. If the “Uninstall” button is greyed out, this is why — revoke device admin first.
4. iPhone: Remove suspicious configuration profiles. Settings → General → VPN & Device Management → tap any unknown profile → Remove Management.
5. Uninstall suspicious apps. On Android after revoking Device Admin: Settings → Apps → [app name] → Uninstall.
6. Run a full security scan with Malwarebytes Mobile or Bitdefender Mobile Security.
7. Change ALL passwords from a different device. Start with email, then Apple ID or Google account, then banking. Enable 2FA using an authenticator app — not SMS.
8. Sign out unknown devices from Google (myaccount.google.com → Security → Your Devices) and Apple (Settings → [your name] → devices).

For future protection at public USB charging stations, use a USB data blocker — it blocks the data pins while still allowing charging, preventing juice jacking.

When to Do a Factory Reset

Do a factory reset only if security scans still show infection after manual removal — and back up only photos and contacts, not your full system backup, which may reintroduce the spyware.

Before you reset: Save photos and videos to iCloud or Google Photos; export contacts to CSV. Do not restore from a full system backup afterward.

How to reset iPhone: Settings → General → Transfer or Reset iPhone → Erase All Content and Settings.

How to reset Android: Settings → General Management → Reset → Factory Data Reset (Samsung) or Settings → System → Reset Options → Erase All Data (stock Android).

After the reset: Set up as a completely new device. Reinstall apps only from official stores. Change your account passwords before signing back in. Monitor battery and data usage closely for the first week.

How to Keep Spy Apps Off Your Phone Going Forward

The most effective prevention is a strong lock screen, never leaving your phone unattended with someone you don’t fully trust, and running a monthly permission audit.

• Use a 6-digit PIN or biometrics. Never use a pattern lock — visible from a distance. Face ID or fingerprint plus a strong PIN is meaningfully harder to bypass.
• Never sideload APKs on Android. Settings → Security → Install Unknown Apps — nothing should have this permission.
• Keep your OS updated. Security patches close the vulnerabilities that spyware exploits.
• Monthly audit: review app permissions, check connected device lists in your Google/Apple account, and run a Malwarebytes scan.
• 2FA on Apple ID and Google account using an authenticator app — not SMS.
• Use a USB data blocker at public charging stations. A $10 plug that blocks data transfer pins while allowing charging eliminates juice jacking risk at airports, hotels, and malls.

For more guides on detecting spy apps, auditing permissions, and locking down your privacy, explore the full library at Infurpose — written for everyday people, not IT professionals.

Related: Check App Permissions on iPhone | Is Your Phone Hacked? | Can Someone Sync My Phone?

Frequently Asked Questions

Can someone install spy apps on my phone without touching it?

On Android, it’s possible through phishing links that trigger app downloads, especially if “install from unknown sources” is enabled. On iPhone, it’s much harder without physical access — iOS requires either a jailbreak or a malicious configuration profile, both of which require direct device contact or convincing you to install a profile yourself. The most common installation method for both platforms remains physical access, usually lasting just a few minutes.

What’s the fastest way to check if my phone has a spy app right now?

On iPhone: Settings → Privacy & Security → App Privacy Report — look for unexpected microphone or camera access in the past 7 days. On Android: Settings → Privacy → Privacy Dashboard — look at the past 24 hours of mic, camera, and location access. Also check Settings → Security → Device Admin Apps for anything you don’t recognize — spyware frequently grants itself Device Admin access to prevent uninstallation, and most people never look here.

Will removing a spy app alert the person who installed it?

Yes — many stalkerware apps send an alert to the monitoring person when they stop receiving data. If you’re in a situation where alerting that person could put you at risk, contact the National Domestic Violence Hotline (1-800-799-7233) before removing anything. A safety advocate can help you plan the safest time and approach.

Do free security scanners detect spy apps?

The free tiers of Malwarebytes Mobile and Bitdefender Mobile Security both detect most known stalkerware strains. Google Play Protect has a significantly lower detection rate for advanced stalkerware in independent testing — it’s useful as a baseline but shouldn’t be relied on alone if you have real concern. A free one-time scan from Malwarebytes is a solid starting point.

Can spy apps survive a factory reset?

A standard factory reset removes virtually all spy apps. The rare exception is spyware installed at the firmware level on a compromised or pre-modified device — uncommon but documented with devices received as gifts from technically capable attackers. If spyware returns after a clean factory reset and fresh setup (not restored from backup), the device itself may be compromised and should be replaced.