Last Updated on October 5, 2026 by Jade Artry
What Is Stalkerware?
Stalkerware is technology used to secretly monitor someone’s private activity without their meaningful knowledge or consent. If somebody repeatedly knows where you have been, who you contacted or things you never told them, hidden software is one possible explanation—but shared accounts, location services and compromised credentials can expose similar information. Establishing the route matters for stopping the access. If checks or changes could be noticed by an abusive person, use a trusted different device to seek support before changing anything.
Technical capability alone doesn’t define stalkerware. Consent, transparency, purpose and context matter. An app’s ability to share location doesn’t make every use abusive. What matters is who can see the information, whether you understand and freely agree to that access, and how it’s being used.
Stalkerware vs Spyware vs Legitimate Monitoring
Spyware describes unauthorised surveillance or data collection; stalkerware describes its use to monitor a person secretly, often within an abusive relationship. Legitimate monitoring depends on appropriate authority, transparency and proportionate use. The distinction is how access is obtained and used, not the product label: freely agreed location sharing is different from an old login used to track someone after permission has ended.
- Spyware: the broader category of software that gathers information without appropriate permission. It can target people, organisations or valuable account data.
- Stalkerware: tools used for undisclosed personal surveillance, often involving a current or former partner. The Coalition Against Stalkerware includes software, apps and devices in its definition.
- Legitimate monitoring: appropriate, transparent access for a valid purpose, such as proportionate parental controls, organisational device management or freely agreed location sharing.
The same feature can support safety in one situation and undermine it in another. A shared-location agreement between adults isn’t the same as someone using an old login to watch your movements after you’ve withdrawn permission. For the family-specific distinction, see our guide to parental monitoring apps vs stalkerware.
How Stalkerware Can Be Used
Monitoring can reveal location, communications, photos, files or activity through a device, its permissions or linked accounts. Some tools also misuse microphone or camera access; capabilities vary. I would ask which route could explain what somebody knows, rather than start with an app-name list. A linked messaging session or exposed cloud account can remain a problem even when the phone’s installed apps look ordinary.
The FTC’s stalkerware guidance explains how surveillance can expose private communications and movements. That helps explain why the issue can affect your physical safety as well as your privacy.
You also don’t need a hidden app for information to leak. Shared credentials, linked messaging sessions or existing location sharing can expose activity. Checking access is therefore more useful than relying on a stalkerware apps list: names can change, and an ordinary-looking service can be used in a way you haven’t agreed to.
Why Stalkerware Is a Personal Safety Concern
Secret monitoring can remove the privacy needed to move freely, talk to somebody or ask for help. A person may hesitate to change a setting because the loss of access could be noticed and provoke retaliation. That is why I would put safety planning before technical cleanup: cutting off one route is not a safe outcome if it increases the danger to the person being watched. You can seek specialist help before identifying the technology.
Refuge reported that referrals to its specialist technology-facilitated abuse and economic empowerment team rose by more than 62% in 2025 compared with 2024. That measures demand reaching one specialist service, not the percentage of people affected or a stalkerware-only rate. It shows why digital surveillance belongs in a conversation about safety, alongside the technical checks.
Real Cases Show Why Account Access Matters
Connected accounts need to be part of safety planning, not an afterthought to an app scan. Refuge describes Mina, whose abuser found her emergency accommodation through cloud accounts linked to a smartwatch she had left behind. That case concerns connected-device and account access, rather than proof of a hidden app. It shows why the phone in your hand is only one part of the access you may need help reviewing.
In a separate 2021 enforcement case, the US Federal Trade Commission banned SpyFone and its CEO from the surveillance business over allegations of secret data harvesting. The FTC described access to movements and private communications that enabled stalkers and abusers to track people, alongside poor security that exposed their information to other threats. This was a regulatory case about a provider’s conduct, not a claim that every monitoring product has the same capabilities.
How AI Fits Into Technology-Facilitated Abuse
Stalkerware does not need AI to cause harm. Refuge’s reporting also warns about the misuse of AI and smart accessories in stalking and control. These technologies can sit within a wider pattern of abuse; identifying an AI feature is not a prerequisite for getting help. Our deepfake guide explains another way synthetic media can complicate trust in what you see or hear.
Signs Your Phone May Be Monitored
The most useful clues are specific access you did not agree to: unfamiliar signed-in sessions, unexpected management or accessibility permissions, unwanted location sharing and account alerts. Somebody repeatedly knowing private details is also a reason to seek help, though it does not identify the route. Record the precise observation somewhere safe if you can. Battery drain or heat alone is less informative because ordinary apps, updates and ageing batteries can produce it.
Someone repeatedly knowing details from private conversations or movements deserves attention too. It doesn’t establish how they found out, but it gives you a clearer concern to discuss with a trusted support professional.
Battery drain, heat and increased data use are weak clues by themselves. Updates, ageing batteries, poor signal and ordinary apps can cause them. An unfamiliar service may also belong to the phone manufacturer, your employer or an accessibility tool you use. Identify it before deciding what it means.
A useful record separates what you observed from what you suspect: the exact alert, app name, permission or date. Keep it only somewhere safe. You don’t need to prove stalkerware is present before asking for help.
How to Check for Stalkerware on Android
On Android, review the full app list, sensitive permissions, accessibility and device-management access, then accounts, linked sessions and location sharing. These are different routes to private information; a scan of installed apps will not cover them all. First consider whether checking or changing access could be seen or provoke a reaction. If so, seek specialist support from a trusted different device before using the checks below. Menu names vary by manufacturer and version.
- Review installed apps. Google’s route is Settings > Apps > See all apps. Open an app’s information to identify it, rather than judging it from its icon or name alone.
- Review permissions. Settings > Security & Privacy > Privacy > Permission manager shows access by type on supported devices. Focus on location, microphone, camera, SMS and call logs. Google’s app-permissions guide explains the available controls.
- Check powerful access. Review enabled services in Accessibility and use Settings search for device administrator or device-management access. Legitimate services may appear here. Google’s restricted-settings guidance explains that accessibility access can read screen content and interact with apps.
- Review accounts and sharing. Check your Google Account’s devices and security activity, messaging apps’ linked sessions and any location-sharing arrangements. An account problem can remain even if the installed apps look ordinary.
- Understand Play Protect. Open Google Play Store > your profile icon > Play Protect. Google’s Play Protect documentation explains its harmful-app checks. It may disable or remove detected apps, so consider safety before starting a scan.
These checks help narrow down access; they’re not a complete forensic examination. A clear scan doesn’t prove nobody can see your information.
How to Check for Stalkerware on iPhone
On iPhone, begin with Apple Account access, connected devices, location sharing, linked sessions and management profiles as well as installed apps. Synced information can expose activity without a hidden surveillance app. Apple’s account-security guide explains that route. Consider whether any changes could be noticed before using the controls below; a safe review and a rapid reset are different decisions.
- Apple Account: in Settings, tap your name and review the connected devices and Sign-In & Security details. Check whether shared credentials, trusted numbers or old devices could give someone access.
- Location and linked access: review Find My sharing and the linked devices or sessions inside messaging and other apps. Each service may have its own sharing controls.
- Safety Check: on iOS 16 or later, go to Settings > Privacy & Security > Safety Check. Apple’s Safety Check guide explains Manage Sharing & Access and Emergency Reset. The first reviews individual access; the second rapidly stops sharing. Consider the effect on your safety before making changes.
- Profiles: check Settings > General > VPN & Device Management. Schools and businesses can legitimately manage devices. Apple’s configuration-profile guidance explains the checks and warns that removing a profile also removes associated settings, apps and data.
Safety Check needs a signed-in Apple Account with two-factor authentication, and restrictions or management can limit some options. It isn’t a stalkerware detection app or an all-clear certificate. If you can’t use it, Apple’s guide links to manual checklists.
What to Do If You Think You’ve Found Stalkerware
Safety comes before cleanup. Removing access, changing passwords or resetting a phone may be noticed by someone monitoring you. If retaliation is possible, a technical fix needs to fit a wider safety plan.
Use a trusted different device to seek help if you can. A specialist can help you decide what to record, where to keep it and when to change access. Private browsing doesn’t make a monitored phone safe.
The NNEDV Safety Net survivor toolkit includes technology safety planning and documentation resources. You can describe your concerns even if you haven’t identified an app. Support shouldn’t depend on your ability to diagnose a device.
Removing Stalkerware Safely
Safe removal means closing the route that exposes information at a time that fits your safety plan. An unwanted app, compromised account and active location-sharing arrangement need different actions, and more than one can be involved. If a loss of access could trigger retaliation or destroy useful evidence, plan the change with specialist support first. Once safe, address the relevant permissions, passwords, recovery details, linked sessions and updates rather than assume deleting an icon completes the recovery.
A trusted security scan may help, but detection varies. EFF and AV-Comparatives research reported by the Coalition found differing results across tested antivirus products. A scan can’t resolve account sharing or every form of technology abuse.
A factory reset or replacement phone may be appropriate in some cases. Before either, consider evidence, essential files, costs and whether a different account is needed. The FTC cautions against reinstalling apps from the old backup because that could restore unwanted software. Reinstall only what you need from trusted sources.
Deleting one app won’t close an exposed cloud account, end separate location sharing or prevent someone with continued access from repeating the behaviour. Plan the whole recovery with support where needed.
Can Legitimate Monitoring Apps Become Stalkerware?
Yes. A tool sold for parental controls, work devices or location sharing can become a means of secret surveillance when used without appropriate authority or meaningful consent. Ask who can see what, whether the person knows, whether they can safely refuse and whether access is being used to control them. The marketing category does not answer those questions.
Marketing a tool for parents or workplaces doesn’t authorise secret monitoring of an adult partner. Paying for a phone or knowing its passcode also doesn’t establish meaningful consent. Agreement obtained through pressure or fear doesn’t give you the same freedom as a choice you can safely refuse.
This distinction keeps the focus on the use and its consequences. You can recognise legitimate device management while taking undisclosed surveillance seriously.
When to Get Help
If monitoring comes with threats, stalking, coercion or fear for your physical safety, technology troubleshooting is only one part of the response. You don’t need a confirmed diagnosis to contact a specialist.
- International: the Coalition Against Stalkerware resources directory lists support organisations by country.
- England: Refuge’s National Domestic Abuse Helpline supports women experiencing domestic abuse and people concerned about them. Call 0808 2000 247, free, 24 hours a day. The website provides online contact options.
- United States: the National Domestic Violence Hotline offers a live advocate by phone on 1-800-799-7233, online chat, or text START to 88788.
Use a safer device or contact method if your activity could be seen. If you’re in immediate danger, contact your local emergency service when it’s safe to do so. You deserve support that helps you make decisions for your circumstances.
Frequently Asked Questions
These answers cover common worries about hidden monitoring, warning signs and getting help safely. If an abusive person may be watching your device, safety planning comes before changing access or removing an app.
How do I know if stalkerware is on my phone?
Review specific access you did not agree to: unexpected apps or permissions, unfamiliar account sessions and unwanted location sharing, alongside what someone knows about your private activity. No single symptom confirms stalkerware, and battery drain alone is weak evidence. If checking or changing access could put you at risk, seek specialist support from a trusted different device first.
Can stalkerware be installed on an iPhone?
An iPhone can be monitored, but the access may involve your Apple Account, synced information, location sharing or management settings rather than a hidden app. Review those routes as well as installed apps. Safety Check can help review sharing on supported iPhones, but it doesn't rule out every form of monitoring.
Can stalkerware be hidden on Android?
Some Android monitoring tools may use misleading names or be hard to notice on the Home Screen. Review the full installed-app list, permissions, accessibility services and device-management access. An unfamiliar system service isn't automatically malicious; identify it before changing anything.
Does antivirus detect stalkerware?
Some security products detect stalkerware, but results vary by product and threat. A clear scan isn't proof that nobody can access your information, and it won't resolve shared accounts or location sharing. A scanner may remove a detected app, so consider safety and evidence before running one.
Should I delete stalkerware as soon as I find it?
No—do not rush to delete it before considering safety and evidence. Removal can be noticed, provoke retaliation or erase useful records. If those risks apply, speak to a specialist from a safer device before changing access. The aim is to stop unwanted monitoring in a way that protects you.
Can a legitimate monitoring app be used as stalkerware?
Yes. A tool designed for parental controls, work devices or agreed location sharing can be misused for undisclosed surveillance. Technical capability alone doesn't determine the issue: meaningful consent, appropriate authority, transparency, purpose and context matter.
