Active Incident? 24/7 Response →
SleuthX

Read this first

Are you on a device or network the person can see?

  • If they might be able to see this device, use one they can’t access — a friend’s phone, a library or public computer, or a domestic-violence shelter’s safe device. If you continue here, your visit may be visible on a synced iCloud, Google account, or shared family plan.
  • If you think spyware or stalkerware is on this device, removing it can alert the person monitoring you and can destroy evidence. Make a safety plan — ideally with a domestic-violence advocate — before you remove anything, and use a device they can’t access in the meantime.
  • The Quick Exit button(top right) replaces this page with weather.com immediately — but it does noterase this visit from your history, and private/incognito mode doesn’t fully hide it either. To be safe, use a device the person can’t access.
  • If you’re in immediate danger, call 911. If you have a few quiet minutes, keep reading.

National Domestic Violence Hotline: 1-800-799-7233 · text START to 88788 · thehotline.org — 24/7, free, confidential.

988 Suicide & Crisis Lifeline: call or text 988 · 988lifeline.org — free, confidential crisis and emotional support, 24/7.

NNEDV Safety Net: techsafety.org — technology-safety help for survivors.

For Individuals & Families

You Found Spyware on Your Phone — What to Do (and Not Do)

The instinct is to delete it immediately. On a monitored device that can be the most dangerous move. Here is the safety-first sequence — plan, preserve, then remove.

All articles·8 min read·June 29, 2026

The instinct to delete is the dangerous one

Finding monitoring software on your phone is frightening, and the natural reaction is to rip it out immediately. On a device tied to an abusive relationship, that can be the most dangerous single move. Many monitoring tools notify the operator if they are disabled or removed, so deletion can tell the person watching that you know — at exactly the moment you are least prepared for their reaction. It also erases the proof.

Why deletion alerts the operator and destroys evidence

Two things are true at once. First, removal can trigger an alert: the watcher learns you found it. Second, removal wipes the record — what was installed, when, and what it could access. The Coalition Against Stalkerware is explicit that removing stalkerware may be detected by the abuser and can increase the danger, and advises survivors to plan before acting. EFF's Surveillance Self-Defense frames the same idea as building a security plan before you change anything.

Preserve before you remove

If there is any chance you will need a protective order or a police report, preservation comes first. On a separate, safe device, note what you saw and when. If a case is likely, a forensic examiner can image the phone before anything is touched, so the findings are documented and court-ready — the court decides what is admissible, and a clean, preserved record is what gives it the chance. A factory reset throws all of that away.

The safe sequence

  1. Pause. Do not confront the person or delete the app yet.
  2. Switch devices. Use a phone or computer the other person cannot access for any sensitive steps — reading this, calling for help, changing passwords.
  3. Get support. Contact a domestic-violence advocate (the hotline is in the banner above) and, if a case is likely, an attorney.
  4. Preserve. If evidence matters, have the device imaged before removal.
  5. Then clean up — in a coordinated way. Remove device-admin rights, uninstall the app, reset accounts from a clean device, and harden two-factor authentication, timed so it does not tip off the watcher.

What not to do

For the full device self-check, see is someone monitoring my phone. If this is connected to an abusive relationship, domestic-violence help and domestic-violence digital forensics are the safest next steps.

Sources

  1. Coalition Against Stalkerware, Information for survivors. https://stopstalkerware.org/information-for-survivors/
  2. Electronic Frontier Foundation — Surveillance Self-Defense, Your Security Plan, 2023. https://ssd.eff.org/module/your-security-plan
  3. U.S. Federal Trade Commission, Stalkerware: What To Know. https://consumer.ftc.gov/articles/stalkerware-what-know
  4. NNEDV Safety Net Project, Location Tracking. https://www.techsafety.org/location-tracking

Related services

Meet Your Practitioner

Quinnlan Varcoe

Founder & CEO

GIAC-certified · 15 industry certifications

With operational experience across Fortune 50 security programs and the defense industrial base, Quinnlan founded SleuthX in 2022 to provide clients with the caliber of expertise typically reserved for the largest enterprises. Her work in threat intelligence and digital forensics has earned the trust of 26,000+ cybersecurity professionals who follow her analysis.

“26,000 professionals follow my work because I say what others won't — and I can back it up technically.”

Fortune 50 BackgroundDefense IndustryThreat IntelligenceDigital PrivacyIncident Response
Quinnlan Varcoe, Founder & CEO

Found spyware: quick answers

Certified Expertise

GIAC · AWS · Splunk · CompTIA

Transparent pricing

Trusted by partners across the practice

DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management
DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management