How to Tell If Your Phone Has Spyware: Realistic Signs and What to Do

A phone that suddenly runs hot, loses battery quickly, or uses more data than usual can be frustrating. Those symptoms are sometimes associated with malicious software, but they are much more commonly caused by ordinary issues such as an aging battery, a buggy app, weak cellular reception, software updates, or heavy background activity.

That distinction is important. There is no single consumer symptom that proves a smartphone has spyware. Useful investigation involves looking for multiple signs, checking apps and permissions, reviewing account activity, installing security updates, and using the security tools already built into iPhone and Android.

This guide explains realistic signs of spyware on a phone without assuming that unusual behavior means you have been hacked. It also covers stalkerware symptoms, permission abuse, mobile security scans, account checks, and when a factory reset may be appropriate.

SEE ALSO: How to Remove Browser Hijackers and Fake “Virus Alert” Pop-ups Safely

If your concern involves stalking, domestic abuse, or someone who may have physical access to your phone, read the personal-safety section before changing settings. Removing access or software can sometimes alert another person.

Quick Takeaways

• Battery drain, heat, crashes, and high data usage can have ordinary explanations and are not proof of spyware.
• More meaningful warning signs include an app you do not recognize combined with powerful permissions, unexplained device-management settings, or account changes you did not make.
• Keep iOS or Android and your apps updated; security fixes are an important defensive layer.
• On Android, keep Google Play Protect enabled and review applications obtained outside your normal app store.
• On iPhone, review Privacy & Security permissions, Apple Account devices, Safety Check when relevant, and unfamiliar configuration or device-management profiles.
• Account compromise can resemble phone compromise. Review your Google or Apple Account and primary email before assuming malware is installed.
• Avoid websites or popups claiming they have remotely “scanned” your phone and detected viruses. Use built-in security tools or established security providers.
• If personal safety is involved, consider using another trusted device to seek help before removing suspected stalkerware or changing shared-account settings.

What Is Phone Spyware?

“Spyware” is a broad term for software designed to secretly collect information from a device or monitor its user without appropriate authorization or knowledge.

Depending on its capabilities and the permissions it obtains, malicious monitoring software might attempt to access information such as:

• Location
• Messages
• Call information
• Photos or files
• Microphone or camera access
• Contacts
• Browser information
• Account data

Not all software that accesses these resources is spyware. A mapping application legitimately needs location information, a camera application requires camera access, and a messaging application may need your contacts if you choose to use that feature.

The relevant questions are whether you deliberately installed or authorized the application, whether its permissions make sense, and whether its behavior matches what it claims to do.

What Is Stalkerware?

The FTC has used the term stalkerware for applications that can enable another person to secretly monitor someone’s smartphone.

This issue can differ from ordinary malware because the person responsible may have had physical access to the phone, know the victim’s passcode, share online accounts, or have access to cloud credentials.

Potential stalkerware concerns therefore extend beyond finding a suspicious application. Shared Apple or Google accounts, location-sharing services, linked devices, family plans, email accounts, cloud-photo access, and messaging sessions can all reveal information without conventional “spyware” being installed.

For someone facing intimate-partner abuse or stalking, making immediate changes may have safety implications. The Coalition Against Stalkerware and National Network to End Domestic Violence (NNEDV) provide specialized technology-safety resources.

Signs of Spyware on a Phone: How Much Should Each Sign Concern You?

Use symptoms as clues rather than proof.

Sign	Common non-malicious explanations	When it deserves a closer look
Unusual battery drain	Old battery, gaming, video, navigation, app update	Persists without usage change and an unfamiliar app consumes significant power
Phone running hot	Charging, gaming, camera use, weak signal, updates	Repeated unexplained heat while phone is idle
Increased data use	Streaming, cloud backup, app updates	Unfamiliar app shows substantial background usage
Slow performance	Low storage, old hardware, software bug	Begins alongside unfamiliar apps or settings
Frequent crashes	App bug, low storage, OS problem	Multiple unusual symptoms appear together
Microphone/camera indicator	Legitimate app actively using sensor	Appears when you are not knowingly using an app that needs it
Unknown app	Forgotten or preinstalled software	You cannot identify it and it has sensitive permissions
New admin/profile settings	Work/school management, legitimate configuration	You do not recognize who controls it
Unknown account device	Old phone, browser session, approximate location error	Successful activity or device clearly does not belong to you
Settings change unexpectedly	OS update, app configuration	Security or recovery changes you did not make

A combination of stronger signals matters more than one generic symptom.

1. Unusual Battery Drain

Battery drain is one of the most commonly cited stalkerware symptoms—and one of the least specific.

Lithium-ion batteries naturally lose capacity over time. Video streaming, poor cellular reception, GPS navigation, social apps, games, cloud synchronization, system indexing, and operating-system updates can also use substantial energy.

How to check battery usage on iPhone

Open Settings > Battery, or search Settings for “Battery.”

iOS displays battery consumption by application and activity over recent periods. Look for apps using more power than you would expect based on how often you use them.

A familiar video app at the top after several hours of streaming is not suspicious. An application you do not recognize showing significant background activity deserves identification.

How to check battery usage on Android

Search Settings for Battery, Battery usage, or App battery usage.

Menu names differ among Pixel, Samsung, Motorola, and other Android phones.

Again, focus on context rather than percentages alone.

2. Your Phone Runs Hot for No Obvious Reason

A phone running hot can indicate heavy processor, graphics, radio, or battery activity. That does not automatically mean malware.

Normal causes include:

• Fast charging
• Gaming
• Video calls
• Recording video
• Navigation
• Installing updates
• Restoring from backup
• Weak cellular signal
• Hot weather

A phone that becomes warm repeatedly while sitting idle may justify checking battery and application activity.

If the device becomes dangerously hot, shuts itself down due to temperature, swells, or has a physically damaged battery, stop treating the issue primarily as a cybersecurity question. Follow the manufacturer’s hardware-safety guidance and obtain appropriate repair support.

3. Data Usage Increases Unexpectedly

Software that transmits information requires network access, so unusual data consumption can be worth reviewing.

However, cloud-photo backups, streaming, application updates, video autoplay, hotspots, and operating-system downloads commonly explain usage increases.

iPhone

Search Settings for Cellular or Mobile Data. iPhone can show cellular data consumption by application.

Pay attention to when the statistics period started before interpreting the numbers.

Android

Search Settings for Data usage, Mobile data usage, or App data usage.

Android generally lets you inspect per-app consumption and distinguish foreground from background use.

An unfamiliar app consuming meaningful background data deserves further investigation, but the data figure alone does not prove malicious behavior.

4. An App Appears That You Do Not Recognize

An unidentified application is more useful as a clue than general battery drain—but still requires context.

Phones contain system applications with unfamiliar names. Carriers and manufacturers may also preinstall software. An application could have been installed months ago and forgotten.

Before deleting anything:

1. Note its exact name.
2. Open its normal application-information page.
3. Check which developer or source is listed where available.
4. Review its permissions.
5. Check whether it is a system, work, or device-management component.
6. Search the Apple App Store, Google Play, phone manufacturer’s support site, or another reputable source for information about it.

Avoid manually disabling obscure system components simply because their names sound technical.

5. An App Has Permissions That Do Not Match Its Purpose

Permission abuse is a more meaningful sign when combined with an unidentified or questionable application.

Sensitive permissions can include:

• Location
• Microphone
• Camera
• Contacts
• Photos/files
• Accessibility capabilities
• Notification access
• Device administration
• VPN/network configuration
• SMS or call permissions on supported Android configurations

A navigation app using location while navigating is expected. A simple utility requesting broad access to your microphone, contacts, location, notifications, and accessibility features deserves more scrutiny.

Permission alone does not establish malicious intent. Evaluate why the application needs it.

How to Review App Permissions on iPhone

Open Settings > Privacy & Security, or search Settings for a permission such as “Microphone” or “Camera.”

iOS groups applications by the resources they can access. Review categories including:

• Location Services
• Tracking
• Contacts
• Photos
• Bluetooth
• Microphone
• Camera
• Local Network

Disable access you do not want an app to have, while remembering that denying a necessary permission can break an intended feature.

Watch the microphone and camera indicators

Current iPhones show privacy indicators when an application uses the microphone or camera.

If an indicator appears unexpectedly, open Control Center to see information about recent sensor use where iOS provides it.

A momentary indicator is not automatically suspicious. Apps may use sensors for legitimate background or recently initiated functions. Repeated unexplained access deserves investigation.

How to Review App Permissions on Android

Search Settings for Privacy dashboard, Permission manager, Permissions, or Security & privacy.

Current Android versions can show which apps recently accessed sensitive resources.

Review categories such as:

• Camera
• Microphone
• Location
• Contacts
• Files/photos
• Nearby devices

Android also has specialized permissions that deserve careful attention.

Search Settings for areas such as Accessibility, Device admin apps, Notification access, Install unknown apps, and VPN. Do not remove an entry automatically; first determine whether it belongs to a legitimate password manager, accessibility tool, employer, antivirus product, parental-control app, or another service you intentionally configured.

6. Camera or Microphone Indicators Appear Unexpectedly

Modern iPhones and Android phones provide visual indicators when applications access the camera or microphone.

These indicators are useful because sensor access is more specific than symptoms such as battery drain.

If you see one unexpectedly:

1. Check which application recently used the sensor through your phone’s privacy interface.
2. Consider whether you just used voice typing, a video application, camera scanning, voice assistant, or another legitimate feature.
3. Review that application’s permissions.
4. Remove the permission if the app does not require it.
5. If the app itself is unfamiliar and unnecessary, investigate it before deciding whether to uninstall it.

Repeated access without an explanation can justify deeper review.

7. Check for Unfamiliar Device Management or Profiles

Device-management features can legitimately give an organization significant control over a phone.

Employers and schools commonly use mobile device management (MDM) on devices they own or administer.

An unfamiliar management configuration on a personal device deserves investigation.

iPhone

Search Settings for VPN & Device Management, Profiles, or similar terms.

If a profile is present, identify its organization and purpose.

Do not remove a work- or school-managed profile from an employer- or institution-owned device without following the organization’s policies. On a personal device, an unknown profile you never intentionally installed deserves review with Apple or another trusted support source.

Android

Android management implementations vary.

Search Settings for:

• Device admin apps
• Work profile
• Device management
• VPN
• Accessibility
• Install unknown apps

A briefcase icon on apps often indicates a legitimate managed work profile.

8. Review Apps Allowed to Install Other Apps on Android

Android can permit installations outside Google Play when a user deliberately authorizes an application as an installation source.

This is a useful feature in legitimate circumstances, but most non-technical users do not need it enabled broadly.

Search Android Settings for Install unknown apps, Unknown app installs, or similar terminology.

Review which applications have permission to install software.

If a browser, file manager, or messaging application has this permission and you no longer need it, consider turning the permission off.

Do not enable this capability because a popup, text message, or unsolicited caller tells you to install a “security update.”

9. Keep Google Play Protect Enabled

Google Play Protect provides built-in scanning and other security services on supported Android devices.

To review it:

1. Open the Google Play Store.
2. Tap your profile icon.
3. Open Play Protect.
4. Review its status.
5. Use its scan function if you have a specific concern.
6. Keep applicable scanning protections enabled.

A clean Play Protect result is useful information but cannot guarantee that every form of malicious software is absent. No security scanner detects every possible threat.

Likewise, one warning should be evaluated carefully using Google’s instructions rather than treated as proof that an attacker has complete control of the phone.

Does iPhone Have an Antivirus Scan?

iOS security works differently from traditional desktop operating systems.

Apple limits how third-party apps interact with other apps and the operating system, so an App Store “antivirus” app generally cannot perform an unrestricted scan of every application and system file in the same way desktop antivirus can.

Security applications on iPhone can still offer useful functions such as:

• Malicious website filtering
• Breach notifications
• VPN services
• Network security features
• Identity monitoring

But an app claiming it can comprehensively inspect every part of iOS should be viewed skeptically.

For iPhone, focus on software updates, Apple Account security, privacy permissions, Safety Check, profiles/device management, and Apple’s built-in protections.

10. Check Your Apple or Google Account

What looks like spyware can actually be unauthorized cloud-account access.

For example, someone signed into your Google Account might see synchronized information without installing anything on your Android phone. Someone with access to an Apple Account or another cloud service may similarly see information that synchronizes through the account.

Google Account

Navigate directly to your Google Account and open Security.

Review:

• Recent security activity
• Signed-in devices
• Passkeys
• 2-Step Verification methods
• Recovery phone and email
• Connected third-party applications

Remove devices or methods that you determine do not belong to you and follow Google’s official compromised-account process if necessary.

Apple Account

On iPhone, open Settings, tap your name, and review the devices associated with your Apple Account.

Also review Sign-In & Security, trusted phone numbers, authentication, and recovery information.

On the web, use Apple’s official account site rather than a link from an unexpected security email.

11. Review Location Sharing

A person may know your location through an ordinary sharing feature rather than spyware.

Possible sources include:

• Apple Find My
• Google Maps location sharing
• Family-sharing features
• Messaging applications
• Fitness applications
• Social media
• Shared photo metadata
• Vehicle or wearable accounts

Review location-sharing settings in the applications you actually use.

Apple Safety Check

Apple provides Safety Check on supported iPhones to help users review and manage sharing, app access, devices, and certain account-security settings.

Search iPhone Settings for Safety Check, typically under Privacy & Security.

Safety Check can be particularly relevant in personal-safety situations, but changing sharing or account access may be noticeable to another person. If that could create danger, use a safer device to consult specialist resources first.

12. Review Accessibility and Notification Access Carefully

On Android especially, Accessibility and notification-access features can provide broad capabilities to legitimate apps.

A password manager, wearable companion, accessibility service, automation app, or other trusted tool may have a valid reason to use them.

Review applications listed in these areas and ask:

• Did I install this?
• Do I still use it?
• Does its purpose explain this access?
• Is it from a developer or organization I recognize?

If the answer is unclear, research the app through Google Play or its legitimate developer before removing access.

These settings are powerful, so they should not be given casually to an app installed from an unexpected link.

13. Watch for Security Settings You Did Not Change

Another potentially meaningful clue is a security setting changing without your action.

Examples may include:

• An unfamiliar screen-lock method
• New account recovery information
• Unknown passkeys or authentication methods
• A new VPN
• An unfamiliar management profile
• Unknown trusted devices
• Location sharing you do not remember enabling

Operating-system updates can change menu layouts and default behavior, so visual differences are not automatically suspicious.

Verify the actual configuration rather than relying on memory of where a setting used to appear.

14. Update the Phone Before Drawing Conclusions

Security updates matter because both iOS and Android periodically receive fixes for vulnerabilities.

iPhone

Search Settings for Software Update and install appropriate current iOS updates.

Review automatic-update options as well.

Android

Search for System update, Software update, Security update, or the manufacturer’s equivalent.

Android support periods differ by device. If your phone has stopped receiving manufacturer security updates, consider upgrading it when practical.

Also update installed apps through your official app store.

A Safe Step-by-Step Mobile Security Scan

There is no universal “scan phone” button that can prove a phone is clean. A useful mobile security scan is really a structured review.

Use this order:

1. Update the operating system and apps. Install legitimate security updates first.
2. Review battery usage. Identify unexpected high-background activity.
3. Review mobile data usage. Look for unfamiliar applications transferring significant data.
4. Inspect installed apps. Identify anything you do not recognize.
5. Check permissions. Focus on camera, microphone, location, photos/files, contacts, Accessibility, notification access, and administration.
6. Check device management and VPNs. Confirm that every profile or management setting has an expected purpose.
7. On Android, run Google Play Protect. Follow any security recommendations it provides.
8. Review your Apple or Google Account. Check devices, sign-ins, authentication methods, and recovery settings.
9. Review location sharing. Check platform and application-level sharing.
10. Review your primary email account. Email can be used to recover many other accounts.

If you find nothing suspicious and the only symptom is battery drain or heat, ordinary device troubleshooting becomes increasingly likely to be useful.

When an Account Problem Looks Like Spyware

Suppose your friend tells you that messages were sent from your social media account while you were asleep.

It is natural to suspect the phone. But the account itself could have been accessed from another device.

Likewise, an unfamiliar email being sent could result from an active browser session, compromised password, connected third-party application, or email forwarding configuration.

Before factory-resetting your phone, review affected account security:

• Change an exposed password if appropriate.
• Sign out unfamiliar sessions.
• Enable strong 2FA or passkeys.
• Review recovery information.
• Check connected applications.
• For email, inspect forwarding and filter rules.

Factory-resetting a phone cannot fix a compromised online account if another person can simply continue signing into that account elsewhere.

What About Commercial Spyware?

Highly sophisticated commercial surveillance tools do exist, and companies such as Apple and Google have introduced protections and notifications intended for users they believe may be targeted by sophisticated attacks.

These cases are distinct from ordinary adware, unsafe apps, or consumer stalkerware.

If Apple, Google, your employer’s security team, a government cybersecurity authority, or another credible source specifically warns you about a sophisticated targeted attack, preserve the notice and follow the provider’s specialized guidance.

Do not assume ordinary battery drain is evidence of this type of surveillance.

Similarly, a webpage claiming “Pegasus detected” or another dramatic warning is not reliable evidence simply because it uses the name of known spyware. Seek qualified assistance when a credible alert exists.

Should You Install a Mobile Antivirus App?

On Android, a reputable mobile security product can provide an additional detection layer, particularly if your usage involves apps from multiple sources.

Google Play Protect should remain enabled on supported devices even if you use another security product.

Avoid installing multiple overlapping security products simply because more scanners seem safer. They can increase battery consumption, create confusing alerts, and sometimes interfere with one another.

On iPhone, third-party security applications operate within iOS restrictions and cannot function exactly like unrestricted Windows antivirus.

Whatever platform you use, avoid “cleaner,” “booster,” or “virus removal” apps promoted by scare-based popups claiming to have already detected threats before installation.

When Should You Consider a Factory Reset?

A factory reset erases user data and returns the phone to a clean system configuration. It can be a useful defensive measure in some situations, but it should not be the automatic first response to a warm phone or short battery life.

Consider a reset when:

• A credible security product or provider identifies malicious software that cannot otherwise be removed.
• An unfamiliar high-privilege app cannot be eliminated normally.
• Important settings repeatedly return after correction without a legitimate explanation.
• The device has an uncertain history and you want to rebuild it from a known state.
• Trusted technical support recommends it after investigation.

In a personal-safety or stalkerware situation, resetting the phone can potentially alert whoever was monitoring it. Consider specialist safety guidance first.

Factory Reset Checklist

If you decide a reset is appropriate, prepare carefully.

Before the reset

1. Preserve important photos, contacts, documents, and other necessary data.
2. Make sure you know the credentials for your Apple or Google Account.
3. Confirm that you can complete 2FA without relying exclusively on the phone being erased.
4. Secure your primary email from another trusted device if account compromise is a concern.
5. Record important account and carrier information.
6. Preserve potential evidence separately if stalking, harassment, workplace security, or law-enforcement reporting may be relevant.
7. Follow Apple, Google, or your phone manufacturer’s current official reset instructions.

After the reset

1. Install current operating-system updates.
2. Use a strong screen-lock passcode or PIN.
3. Sign into accounts whose security you have already reviewed.
4. Reinstall applications from trusted sources.
5. Avoid automatically reinstalling an unknown app that caused concern.
6. Review permissions as applications request them.
7. Re-enable lost-device and backup services.
8. Confirm 2FA, passkeys, and recovery methods.

A backup can potentially restore settings or apps you did not intend to restore. If there is a well-founded concern about a particular app or configuration, discuss restoration strategy with qualified support.

Common Mistakes to Avoid

Do not assume unusual battery drain or heat means your phone is infected. Those symptoms are common and nonspecific.

Do not trust webpages that claim to have scanned your iPhone or Android device simply because you visited the page. A normal webpage does not have unrestricted access to scan your entire phone for malware.

Avoid downloading an unknown “antivirus” application from a link in a warning popup.

Do not delete unfamiliar system applications at random. Identify them first; disabling essential phone components can cause reliability problems.

Do not overlook account security. Someone accessing synchronized cloud information can create symptoms that look like device surveillance.

Avoid confronting a person you suspect of installing stalkerware if doing so may create a personal-safety risk. Specialist resources can help plan safer next steps.

Do not immediately reset the phone when potential evidence may be important. A reset can destroy information useful to an employer’s security team, service provider, advocate, or law-enforcement investigation.

Finally, do not assume a clean scan proves that every possible threat is absent. Consumer security tools have limits, particularly against sophisticated targeted attacks.

FAQ

What are the clearest signs of spyware on a phone?

There is no single definitive consumer symptom. More meaningful signs include an unknown application with powerful permissions, unfamiliar device-management settings, unexplained security changes, or credible alerts from built-in security systems.

Battery drain, heat, and slow performance alone are much weaker indicators.

Does unusual battery drain mean spyware?

Usually, battery drain has many possible causes. Battery age, high screen time, gaming, weak network reception, cloud backups, software updates, and application bugs are common explanations.

Check the phone’s per-app battery report before drawing conclusions.

Why is my phone running hot when I am not using it?

Background updates, photo processing, backups, weak cellular signal, application activity, charging, or software bugs can cause heat.

If the issue persists, check battery activity, update the phone, restart it, and investigate unfamiliar applications. Severe overheating or battery swelling warrants hardware-support attention.

Can an iPhone get spyware?

No modern computing platform should be treated as incapable of compromise. Apple uses strong security mechanisms including application sandboxing, code signing, secure updates, and permission controls, but vulnerabilities can exist.

For ordinary users, keep iOS current, review permissions and account security, and treat claims of infection from random webpages skeptically.

Can Android detect spyware automatically?

Android provides security protections including Google Play Protect on supported devices. Play Protect scans apps and can warn about potentially harmful software.

No scanner can guarantee detection of every possible threat. Permissions, account activity, app sources, and device-management settings still deserve attention.

Does a green or orange indicator mean someone is spying on me?

Not necessarily. Modern phones display indicators when an app uses the camera or microphone.

That could be expected during a video call, voice recording, voice typing, or camera use. Check which app triggered the indicator if it appears unexpectedly.

Can someone monitor my phone without installing an app?

Potentially, some information can be accessed through shared or compromised online accounts, location-sharing features, linked devices, family services, or cloud synchronization without traditional spyware being installed locally.

That is why checking your Apple/Google Account and email is part of this guide.

Will a factory reset remove spyware?

A factory reset can remove many forms of user-installed unwanted software by erasing applications and settings. It is not a universal guarantee against every possible threat, and it does not fix compromised online accounts.

Secure those accounts separately and carefully consider what you restore afterward.

Should I change all my passwords if I suspect spyware?

Not automatically.

If you have credible reason to believe credentials were exposed, change affected passwords from another trusted device and make each new password unique. Prioritize your primary email, password manager, Apple/Google account, financial services, and other important accounts.

Should I take my phone to a repair shop for a spyware scan?

A reputable authorized or established repair provider can help troubleshoot hardware and ordinary software problems, but not every repair shop specializes in digital forensics or stalkerware.

For significant security, legal, workplace, or personal-safety concerns, seek a provider or organization with appropriate expertise.

When to Get Extra Help

Contact Apple, Google, your Android manufacturer, or your mobile carrier through an official support channel if you find settings you cannot explain, cannot remove an unfamiliar application, lose access to your account, or receive a credible provider security warning.

If you suspect an account rather than the phone itself was accessed, use that provider’s official compromised-account recovery process. Review active sessions, authentication methods, recovery information, and connected applications.

For workplace phones, contact your employer’s IT or security team. Device-management applications or settings that appear unfamiliar may be legitimate company controls.

If you find transactions you do not recognize, contact your bank, credit union, card issuer, or payment provider through its official app or a trusted phone number. This article provides cybersecurity education, not financial advice.

For possible identity theft, US consumers can find official general information and recovery steps through the Federal Trade Commission at IdentityTheft.gov.

If stalking or domestic abuse may be involved

Do not assume that immediately removing suspected monitoring is always the safest first action.

A person monitoring a device may notice when access suddenly disappears, location sharing stops, passwords change, or software is removed. Consider using another device that the other person cannot access to seek assistance.

The National Network to End Domestic Violence’s Safety Net Project and the Coalition Against Stalkerware provide technology-safety resources. In the US, the National Domestic Violence Hotline also provides confidential support.

If there is immediate danger, contact emergency services or an appropriate local resource.

Conclusion: A Practical Phone Spyware Checklist

Most individual phone problems have ordinary explanations. The useful question is not “Is my battery draining?” but whether several stronger indicators point to unauthorized software or account access.

Use this short checklist:

• Update iOS or Android and your applications.
• Review battery and mobile-data usage.
• Identify applications you do not recognize.
• Check sensitive app permissions.
• Review microphone and camera activity.
• Check device-management profiles, accessibility access, VPNs, and similar privileged settings.
• Run Google Play Protect on supported Android phones.
• Review your Apple or Google Account devices and authentication settings.
• Check location-sharing features.
• Secure your primary email account.
• Consider a factory reset only when circumstances justify it and after preparing recovery and backups.
• Seek specialized safety help before making detectable changes if stalking or domestic abuse may be involved.

Phone security works best when it is evidence-based. One warm afternoon or a rapidly draining battery is not enough to diagnose spyware. Checking applications, permissions, accounts, and security settings provides a much clearer picture.