Start with what you’ve actually noticed
Most people land on a page like this for one of two reasons: something about the phone feels off, or a person in your life keeps knowing things they shouldn’t know — where you were, who you talked to, what you wrote.
That second one matters far more. Security researchers and advocates who work with stalking survivors consistently say the strongest indicator of monitoring is not a technical symptom — it’s the other person’s behavior. If someone repeatedly knows your location, your conversations, or your plans without a normal explanation, take that seriously, even if your phone seems perfectly fine.
The “warning signs” you’ve read are mostly myths
Articles ranking at the top of search results list symptoms like battery drain, a warm phone, high data use, or slow performance as signs of spyware. Here’s the honest version:
- Battery drain, heat, and slowness are overwhelmingly caused by ordinary things: aging batteries, buggy app updates, background sync, hot weather. Modern monitoring apps are also deliberately designed to be light so they don’t cause obvious symptoms.
- High data use can matter, but only as a pattern: a specific app you don’t recognize uploading large amounts, especially while the screen is off. A vague “my bill seems high” is not evidence.
- Weird noises on calls is a leftover from the landline-wiretap era. It is not how modern phone interception works.
Treat symptom checklists as prompts to investigate — not as proof of anything.
Three very different kinds of “tracking”
Mixing these up leads people to fix the wrong problem:
- Account access. Someone who knows or guessed your password — or whose device is still signed in — can read your email, see your location through Google or iCloud, and view your photos and messages without anything being installed on your phone. In real cases involving a current or former partner, this is the most common mechanism by far.
- Stalkerware or a misused app. Software on the phone itself that reports your activity to another person. This usually requires someone to have had physical access to your unlocked phone. See What is stalkerware?
- Commercial tracking. Advertisers and data brokers building a profile of you from your apps and browsing. This is real and worth reducing — see Advertising IDs — but it is a different threat: companies tracking everyone, not a person targeting you.
What to check first (it isn’t the app list)
Because account access is the most common mechanism, start there:
- Google: myaccount.google.com → Security → Your devices and Recent security activity. Remove devices you don’t recognize. Check Google Maps → Location sharing to see who can see your location.
- Apple: Settings → your name → check the device list. On iOS 16+, run Safety Check (Settings → Privacy & Security) to review what you’re sharing and with whom.
- Both: review app passwords, mail-forwarding rules, and recovery email/phone numbers — quiet changes there can outlast a password reset.
- Shared plans and family features: family locator apps, carrier family plans, and “Find My” sharing are legitimate features that are frequently misused. Check what’s enabled and who’s on it.
Important: if you believe the person monitoring you may react badly to losing access, read Safety first before you remove devices, change passwords, or delete anything. Sudden changes can alert them, and removing things can destroy evidence you may later want.
When a scan helps — and what it can’t promise
A scan like DeSpy’s examines the phone itself: installed apps, their permissions, monitoring-related settings, and known stalkerware signatures. That’s genuinely useful for kind #2 above. But no consumer scan can examine everything, and a clean result never proves a device is clean — it means nothing was found in what was checked. We wrote an honest page about exactly this: What a scan can and can’t tell you.