An honest note about signs
Most “is your phone being tapped?” lists start with battery drain, heat, echo on calls or strange texts. Nearly all have ordinary explanations and prove nothing alone, while some genuinely meaningful signs rarely make those lists. Here we separate strong signs, which can point directly to someone accessing your phone or account, from weak ones, which are only a reason to look.
Strong signs
- Messages, photos or location that exist only on your phone are known to someone else
- A management profile, device administrator app or accessibility permission you don’t recognise
- An app you don’t remember installing, or one with no visible icon
- Alerts about sign-ins to your account from an unknown device
- A phone, tablet or computer you don’t own in your account’s device list
- An email forwarding rule you didn’t create
- Your recovery email or phone number changed without your knowledge
Any one of these is a reasonable basis for thinking someone has accessed your phone or account.
Weak signs
- Battery drain or heat
- Higher mobile data use
- Echo, crackle or clicks on calls
- The phone switching on or off, or the screen lighting up
- Texts with meaningless characters
Each can be explained by an old battery, a busy app, a weak signal, a bug or an update. Alone they show nothing; alongside a strong sign they matter more.
Checks on iPhone
- Settings > General > VPN & Device Management: look for profiles you don’t recognise. On a personal phone there is usually none.
- Devices on your Apple account: tap your name at the top of Settings and review the device list.
- Location sharing: in Find My, check who you share your location with.
- Safety Check: available on current iOS versions, it helps you review what you share with whom and which devices can access your account.
- Passcode: if someone knows it, access to your phone and account is much easier.
Checks on Android
Menu names vary by manufacturer and version; search for these in Settings.
- Device admin apps: in security settings, look for apps with administrator rights you don’t recognise.
- Accessibility: these services can read everything on screen. Note any you didn’t enable.
- Install unknown apps: see which apps can install apps from outside the store.
- Google Play Protect: check it’s on. If it was switched off without you, that’s a sign.
- Devices on your Google account: review signed-in devices in account settings.
Your accounts matter as much as the phone
Often the problem isn’t an app but an account someone else can reach. Anyone with your Apple or Google password can see photos, backups and location without installing anything. Reviewing open sessions, linked devices, recovery details and two-factor settings matters as much as checking the phone.
Your safety comes first
If you suspect a partner, ex-partner or relative installed spyware, think about safety before technology. Removing it or suddenly changing passwords can alert that person and escalate their behaviour.
- Contact us or a support organization from a device that person cannot access.
- Don’t leave conversation history on a device they can see.
- Make changes only after a safety plan, and in the right order.
- If you are in immediate danger, call 112. For social support and referral in Turkey, call ALO 183.
When to get a professional inspection
If you’ve seen a strong sign, have a safety concern, or may need the findings in legal proceedings, a professional phone inspection is the right step: settings, accounts and permissions are reviewed, and backups and logs are analysed with forensic tools. One limit should be stated plainly: advanced commercial spyware aimed at specific people can leave very few traces, so finding nothing is not absolute proof. If you think you could be that kind of target, tell us before the inspection.