![\"Diagram](\"https:\/\/spyapp.net\/blog\/wp-content\/uploads\/spyapp-blog\/04-stalkerware-explained-inline-1.png\")
<\/figure>\nA typical commercial stalkerware product, once installed on a phone, reports some or all of the following to a web dashboard the installer logs into:<\/p>\n
- \n
- Live GPS location and location history<\/li>\n
- SMS messages and \u2014 via Accessibility abuse \u2014 chats in WhatsApp, Messenger, Telegram and other apps<\/li>\n
- Call logs, and on some products, recorded calls and ambient audio from the microphone<\/li>\n
- Photos, browsing history, calendar and contacts<\/li>\n
- Keystrokes, including things typed and then deleted<\/li>\n<\/ul>\n
Most products hide their icon after installation and disguise themselves in the app list under names like “Device Health” or “Sync Service”. Many give the installer remote controls \u2014 including remotely deleting the app to destroy evidence.<\/p>\n
“Parental control” \u2014 the marketing loophole<\/h2>\n
Genuine parental-control software exists and serves a real purpose. The difference is transparency: legitimate products are visible on the device, announce themselves, and are designed for parents supervising young children \u2014 not for monitoring another adult in secret.<\/p>\n
Stalkerware borrows the parental-control label as legal cover while building features that only make sense for covert surveillance of adults: hidden icons, disguised process names, tamper alerts that notify the installer if the app is touched. No child-safety purpose requires the app to hide from the person carrying the phone. When you see “undetectable” in the marketing, you are looking at stalkerware, whatever the header says.<\/p>\n
It’s worth saying plainly: secretly installing monitoring software on another adult’s phone is illegal in most jurisdictions \u2014 it typically violates wiretapping, computer-misuse, or stalking laws, and evidence from a victim’s phone has supported criminal cases. The marketing fiction exists precisely because the honest description would be unsellable.<\/p>\n
How it gets onto a phone<\/h2>\n
Stalkerware almost always requires physical access to an unlocked phone<\/strong> \u2014 typically five to ten minutes. The installer downloads an APK from the vendor’s site, grants the permissions, hides the icon, and hands the phone back. That access usually comes from intimacy: a partner who knows your PIN, a phone left charging overnight, a “let me set up your new phone for you.”<\/p>\n
This is also why stalkerware is overwhelmingly an intimate-partner problem. The people with the access, the motive, and the interest in one specific person’s life are rarely strangers.<\/p>\n
A second, smaller route: a “gift” phone that arrives pre-configured. If a controlling person insists you use a phone they set up, treat that phone as monitored.<\/p>\n
The warning signs<\/h2>\n
Technical signs overlap with general spyware \u2014 battery drain, data usage, a warm idle phone, and above all unfamiliar entries in Settings \u2192 Accessibility<\/strong> and Device admin apps<\/strong>. Our guides to spyware warning signs<\/a> and finding hidden apps<\/a> walk through every check.<\/p>\n
But with stalkerware, the strongest signal is usually behavioral: someone repeatedly knows things they shouldn’t. Where you were. Who you talked to. What you said in a private chat. Victims often doubt themselves for months because each incident has a plausible innocent explanation. The pattern is the evidence. If a specific person consistently has information that could only come from your phone, take that seriously \u2014 your intuition has already done the detection.<\/p>\n
If you think your phone is monitored: safety first, removal second<\/h2>\n
![\"Safety-first](\"https:\/\/spyapp.net\/blog\/wp-content\/uploads\/spyapp-blog\/04-stalkerware-explained-inline-2.png\")
<\/figure>\nThis is where stalkerware advice must differ from ordinary malware advice, and please read this part before touching anything.<\/p>\n
Removing stalkerware is visible to the person monitoring you.<\/strong> Their dashboard goes quiet; many products actively alert the installer to removal attempts. In abusive situations, that moment \u2014 the abuser realizing they’ve lost access \u2014 can escalate risk. Security comes second to safety.<\/p>\n
So, in order:<\/p>\n
- \n
- Assess your situation honestly.<\/strong> If the likely installer is someone you fear, do not remove anything yet. Use a safer device (a friend’s phone, a library computer) for sensitive communication in the meantime.<\/li>\n
- Talk to people who handle this every day.<\/strong> Domestic-violence hotlines and support organizations are familiar with stalkerware and can help you plan around it \u2014 including how removal timing fits into a broader safety plan. The Coalition Against Stalkerware (stopstalkerware.org) maintains a directory of organizations by country.<\/li>\n
- Document before you delete.<\/strong> Photograph the app’s settings pages, its Accessibility and device-admin entries, and your dashboard findings with another camera. If you pursue legal action, evidence on the phone is far more useful intact \u2014 police can forensically image the device.<\/li>\n
- When you’re ready to clean the phone<\/strong>, follow our step-by-step removal guide<\/a>, or factory reset for certainty. Then change every important password from a clean device and switch two-factor authentication away from SMS.<\/li>\n
- Close the door that was used.<\/strong> New PIN that nobody has seen, no fingerprints or face unlock entries that aren’t yours, and no more unlocked phone left alone with the person in question.<\/li>\n<\/ol>\n
Checking a file you’re suspicious about<\/h2>\n
- Talk to people who handle this every day.<\/strong> Domestic-violence hotlines and support organizations are familiar with stalkerware and can help you plan around it \u2014 including how removal timing fits into a broader safety plan. The Coalition Against Stalkerware (stopstalkerware.org) maintains a directory of organizations by country.<\/li>\n
- Assess your situation honestly.<\/strong> If the likely installer is someone you fear, do not remove anything yet. Use a safer device (a friend’s phone, a library computer) for sensitive communication in the meantime.<\/li>\n