Hidden Eyes on Your Phone: Recognizing and Eliminating Surveillance Software Before It Does More Harm

Your smartphone knows more about you than almost anyone in your life. It tracks your location, records your conversations, stores your messages, and holds the passwords to your financial accounts. For most people, that intimacy is a convenience. For an estimated one in six domestic abuse survivors in the United States, it has become a surveillance instrument — one installed quietly, often by someone they trusted.

Stalkerware is the term used for a category of commercial software specifically designed to monitor a target device while hiding from its owner. Unlike parental control applications — which are disclosed and operate transparently — stalkerware conceals itself from the person being monitored. It is sold openly on the internet, often marketed under euphemisms like "employee monitoring" or "spouse verification" tools, and it is almost universally deployed without the target's knowledge or consent.

Understanding how to recognize and address stalkerware is not a fringe security concern. It is a practical safety issue for millions of Americans.

The Warning Signs Worth Taking Seriously

Stalkerware imposes a computational cost on the devices it inhabits. Because it typically runs continuously in the background — logging keystrokes, capturing screenshots, recording calls, or transmitting GPS coordinates — it tends to produce observable side effects.

Unexplained battery drain is among the most commonly reported symptoms. If a phone that previously lasted a full day on a charge now requires mid-afternoon recharging without any obvious change in your usage habits, background software activity is a plausible explanation worth investigating.

Unusual data consumption is another reliable indicator. Stalkerware must transmit the information it collects — often to a remote server controlled by whoever installed it. Reviewing your mobile data usage breakdown (available in Settings on both iOS and Android) can reveal applications consuming data in quantities that don't match their apparent function.

Device overheating during idle periods, sluggish performance, and longer-than-normal shutdown times have also been associated with surveillance software. A phone that hesitates noticeably before powering off may be completing transmission tasks before closing.

Finally, pay attention to behavioral anomalies in your social environment. If a partner, employer, or acquaintance demonstrates knowledge of private conversations, locations, or activities they could not plausibly have learned through ordinary means, that warrants serious scrutiny of your device.

How Stalkerware Gets Installed

On Android devices, stalkerware installation typically requires brief physical access to the phone and the enabling of a setting called "Install from Unknown Sources," which permits applications downloaded outside the official Google Play Store. On iPhones, installation is more technically constrained — Apple's closed ecosystem makes traditional stalkerware installation significantly harder — but compromised iCloud credentials can expose location data and message backups without any software being installed at all.

In domestic situations, perpetrators often have access to unlocked devices and may know the victim's PIN. In workplace contexts, employer-managed devices may legally carry monitoring software, though disclosure requirements vary by state.

Detection Strategies for Android and iPhone

For Android users, begin by navigating to Settings > Apps and selecting the option to show all applications, including system apps. Look for unfamiliar application names, particularly those with generic titles designed to blend in — terms like "System Service," "Phone Monitor," or "Sync Manager" that you do not recall installing. Cross-reference anything suspicious with an online search.

Also check Settings > Battery > Battery Usage for applications consuming power disproportionate to their visible function, and review Settings > Privacy > Permission Manager for apps that have been granted access to your microphone, camera, or location without obvious justification.

For iPhone users, review Settings > Privacy & Security to audit which applications have access to location, microphone, and camera. Check Settings > [Your Name] > iCloud to confirm that only trusted devices are linked to your Apple ID. Enabling two-factor authentication on your Apple ID is a critical protective measure if you suspect your credentials have been compromised.

Third-party security tools — including Malwarebytes for Android and the Coalition Against Stalkerware's recommended resources — can assist in identifying known stalkerware signatures.

The Legal Landscape

Installing stalkerware on another adult's device without their knowledge or consent is illegal under federal law in the United States, specifically the Electronic Communications Privacy Act, as well as under the laws of most states. The Federal Trade Commission has pursued enforcement actions against stalkerware vendors, and several companies have faced significant penalties.

However, legal complexity arises in certain contexts. Employers monitoring company-owned devices may operate within legal bounds depending on state law and disclosed policy. Parents monitoring minor children occupy a legally distinct category. The critical legal threshold in most jurisdictions is consent and disclosure.

Victims of stalkerware in domestic abuse situations should be aware that simply removing the software may alert the perpetrator, potentially escalating a dangerous situation. Safety planning should precede any technical action.

Resources for Those Affected

The National Domestic Violence Hotline (1-800-799-7233) provides guidance specifically tailored to technology-facilitated abuse and can connect callers with advocates who understand digital safety planning. The Coalition Against Stalkerware (stopstalkerware.org) maintains a directory of vetted resources and detection tools. The Cyber Civil Rights Initiative offers support for victims of non-consensual surveillance and intimate image abuse.

If you are in a situation where you believe your device is compromised and your safety may be at risk, prioritize physical safety before digital remediation. Consider using a trusted friend's device or a library computer to seek help, and consult with a domestic violence advocate before making changes that could be detected.