Signs that a phone may be monitored, and what they do not prove

Before you change anything

Weak signs that are usually something else

Many lists of “warning signs” start with symptoms that almost every phone shows at some point. Safety organisations such as the Safety Net Project mention them as possible signs, but on their own they prove very little.

• Battery drains quickly. Batteries lose capacity with age. Navigation, video, games and weak mobile signal all use a lot of power.
• The phone feels warm. Charging, fast charging, hot weather and heavy apps all cause heat.
• Data use goes up. App updates, photo backups, streaming and video calls use far more data than most monitoring apps.
• The phone is slow or restarts. Low storage, a pending system update or an older phone are the usual causes.
• Odd noises during calls. Call quality depends on the network. It is not a reliable sign of monitoring on modern phones.

If one of these appears alongside a sign from the next section, it is worth a closer look. On its own, it is usually something else. Settings › Battery shows which apps use the most power, and Settings › Network › Data usage shows which apps use the most data. An unfamiliar name near the top is more useful than the total.

Signs of stalkerware on Android worth checking

Stalkerware and other monitoring apps usually need special access to do their job, and Android shows that access in Settings. These signs are more specific:

• An app you do not recognise has accessibility access. This lets an app read what is on the screen. See check accessibility services.
• An app you do not recognise has notification access. This lets an app read message previews. See check notification access.
• A device admin app you did not add. This makes an app harder to uninstall. See check device admin apps.
• An app with no icon. It appears in Settings › Apps but not in your app drawer. See find hidden apps.
• Unknown apps are allowed to install other apps. In Install unknown apps, a browser or file manager you do not use is turned on.
• An unfamiliar device on your Google account. Your Google Account’s Security › Your devices lists every signed-in device.

None of these proves monitoring. Password managers, screen readers, smartwatches and work apps use the same access. What matters is whether you recognise the app and remember allowing it.

Someone knowing things they should not

The Safety Net Project notes that the most common sign is often another person’s behaviour: they know about messages, places or photos they had no other way to know.

That is a strong reason to check, but it does not always mean an app is installed. The same information can come from:

• a shared or known password for your Google account, email or social media
• location sharing in Google Maps or a family app
• a linked device in a messaging app, such as WhatsApp linked devices
• email forwarding or filters that send copies elsewhere
• shared photo libraries or cloud backups
• mutual friends, or posts and check-ins

Checking account access is as important as checking apps. Changing a password or removing a device can also be noticed, so the caveat above applies here too.

If you notice a sign

Noticing a sign does not mean you have to act on it straight away. A calm order that many support services suggest:

1. Write it down. What you noticed, where, and when. Notes on paper or another device are safest.
2. Look, but do not change yet. Review the lists in Settings and in your accounts. Looking does not remove anything.
3. Talk it through. A domestic abuse service or tech safety advocate can help you decide what matters and what to do next.
4. Then decide. Remove, turn off or keep things as they are, with a plan. Before you remove a suspicious app covers this step.

It is also fine to find nothing and still feel uneasy. Your own sense that something has changed is worth taking seriously, and a support service can help you look further.

How to check with Applore

Applore’s safety tools are free, run on your phone and show no ads.

Known monitoring appHighWorth a lookNot flagged

A Not flagged result does not prove that the phone is clean. How Applore’s check works explains each level.

How to check without Applore

Menu names differ between phone makers and Android versions. Use the search bar at the top of Settings if a path does not match.

The Android phone safety checklist and how to check an Android phone for stalkerware cover each step in more detail.

What Applore cannot do

Applore also cannot see account-level access, such as someone signed in to your Google account from another device. Safety Check points you to those screens, but you review them yourself.

Get support

If you find something you do not recognise, read this before you remove a suspicious app. The Applore app includes support contacts for India, the United States and the United Kingdom, plus global options. If you live somewhere else, search for a domestic abuse helpline in your country. Support hotlines lists where to start. If you are in immediate danger, contact your local emergency number.

What Applore reads during the check is in the privacy policy. More guides are on the safety hub.