iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Commercial spyware can expose whatever a particular app can reach on a particular device. Documented cases include location, calls, text messages, email, photos, browsing history and screenshots; some Android spyware has also provided live microphone or camera capture. Those capabilities are not a universal checklist. Access depends on the phone’s operating system, how the software was installed, permissions, account or backup access, and sometimes elevated access such as rooting.
It is equally misleading to say that spyware can “see everything” or that a clean phone scan proves a device is safe. The evidence covers specific products and cases, while current iOS and Android releases, app security and cloud accounts continue to change.
What “commercial spyware” means
The Coalition Against Stalkerware defines stalkerware as software made available directly to individuals that lets someone monitor another person’s device without consent and without explicit, persistent notification. The definition focuses on covert monitoring that can facilitate intimate-partner surveillance, harassment, abuse, stalking or violence.
Recommended Free Tools
Installation may require the phone owner’s passcode, physical access or an account password. That requirement does not, by itself, constitute informed consent. Ordinary parental-control, employee-management, backup or remote-support tools can also be misused, so the decisive issue is covert, non-consensual monitoring rather than the marketing category of the app.
#1 Best Overall
- YOUR CONTENT, SUPER SMOOTH: The ultra-clear 6.7" FHD+ Super AMOLED display of Galaxy A17 5G helps bring your content to life, whether you're scrolling through recipes or video chatting with loved ones.¹
- LIVE FAST. CHARGE FASTER: Focus more on the moment and less on your battery percentage with Galaxy A17 5G. Super Fast Charging powers up your battery so you can get back to life sooner.²
- MEMORIES MADE PICTURE PERFECT: Capture every angle in stunning clarity, from wide family photos to close-ups of friends, with the triple-lens camera on Galaxy A17 5G.
- NEED MORE STORAGE? WE HAVE YOU COVERED: With an improved 2TB of expandable storage, Galaxy A17 5G makes it easy to keep cherished photos, videos and important files readily accessible whenever you need them.³
- BUILT TO LAST: With an improved IP54 rating, Galaxy A17 5G is even more durable than before.⁴ It’s built to resist splashes and dust and comes with a stronger yet slimmer Gorilla Glass Victus front and Glass Fiber Reinforced Polymer back.
What documented spyware has accessed
The table below combines capabilities reported by the Coalition Against Stalkerware, a 2023 peer-reviewed analysis of 14 consumer Android spyware apps by Liu and colleagues, and the US Federal Trade Commission’s 2021 SpyFone enforcement case. A capability shown in one row means it was documented under those conditions; it does not mean every product offers it.
| Data or function | What has been documented | Important qualification |
|---|---|---|
| Location | GPS or live location and movement information | The FTC described SpyFone exposing live and GPS location; the Coalition lists location as sensitive data stalkerware may collect. |
| Texts, calls and email | Reading messages, call information and email activity | The Android study found monitoring of texts, calls and email in the apps it examined. SpyFone’s advertised and investigated functions included text messages. |
| Web activity | Browser history and related online activity | The FTC case described access to web histories; coverage varies with permissions and the device configuration. |
| Photos and screenshots | Collecting photos and taking screenshots through remote commands | Both the FTC case and the Android study documented photo-related monitoring; screenshots were a behavior in the studied Android apps. |
| Microphone | Live audio access or on-demand recording | Liu and colleagues observed live microphone access in some analyzed Android apps, not in every commercial spyware product. |
| Camera | On-demand video or image capture | The same study documented audio/video capture commands in particular Android apps. It does not establish that every app can silently operate every camera. |
| iPhone or iPad backup data | Information obtained from iCloud backups | The Coalition describes this as a cloud-backup route, distinct from a covert app directly reading every item on an iPhone or iPad. |
Location and movement
Location is one of the clearest documented targets. A monitoring service may receive GPS coordinates or a live location view when the installed software has the relevant permissions or when a cloud account supplies the information. The FTC’s SpyFone case specifically described live location and GPS location exposure.
Messages, calls, email and browsing
Researchers studying 14 leading consumer Android spyware apps in 2023 found functions for monitoring texts, calls, email and related activity. The FTC’s SpyFone enforcement account also described access to text messages and web histories. Whether a particular chat, mail account or browser session is captured depends on the app’s implementation, permissions and the phone’s security state.
Photos, screenshots and device activity
Spyware can target the photo library when it has a route to that data, and some studied Android apps accepted remote screenshot commands. A screenshot can reveal whatever is visible at that moment, including an open conversation or account page, but it is not the same as permanent access to every file stored on the device.
Microphone and camera
Some of the Android apps analyzed by Liu and colleagues exposed live microphone access and on-demand audio or video capture. These findings show a serious possible risk, not a universal feature. Camera and microphone permissions, operating-system restrictions, foreground indicators and the app’s technical design all affect what can happen.
Rank #2
- Blazing-fast Qualcomm performance. Get the speed you need for great entertainment with a Snapdragon 680 processor and 4GB**** of RAM.
- Fluid display + immersive stereo sound. Bring your entertainment to life with an ultrawide 6.5" 90Hz* HD+ display plus stereo speakers, Dolby Atmos, and Hi-Res Audio**.
- 50MP*** Quad Pixel camera. Capture sharper, more vibrant photos day or night with 4x the light sensitivity.
- 64GB**** built-in storage. Get plenty of room for photos, movies, songs, and apps—and add up to 1TB more with a microSD card*****.
- Unbelievable battery life. Work and play nonstop with a long-lasting 5000mAh battery.*****
Cloud-backed information on Apple devices
For iPhones and iPads, the Coalition notes that some stalkerware obtains information from iCloud backups. This is an account or backup compromise, not proof that an invisible app can read every current item on an iPhone. Securing the Apple account and its trusted devices therefore matters separately from checking the handset for an installed app.
What spyware cannot automatically do
There is no evidence-based universal list of data that all commercial spyware can never access. There is also no basis for claiming that every product can read every encrypted chat, password, camera feed or application on every phone. Those outcomes depend on the specific app, permissions, operating-system version, account state and whether the device has been modified.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minute“Can someone see everything on my phone?”
Not as a general rule. Documented products reached particular categories of information through particular mechanisms. A permission may expose photos but not another app’s protected database; a screenshot may reveal a screen only while it is displayed; and a backup may contain older data rather than everything currently on the handset.
Encryption is not a blanket answer
End-to-end encryption can protect data while it travels between services, but spyware operating on an unlocked endpoint may capture a message before encryption or after decryption. Conversely, an app without the necessary permissions or elevated access may be unable to obtain that content. The available evidence does not support a blanket promise either way.
Passwords and protected app data
The reviewed sources do not establish that all passwords or all app contents are automatically exposed. Rooting, accessibility abuse, notification access, screenshots, cloud credentials or other workarounds may change the result in a particular case, but each is a condition to verify rather than an assumption to make.
Rank #3
- Please note, this device does not support E-SIM; This 4G model is compatible with all GSM networks worldwide outside of the U.S. In the US, ONLY compatible with T-Mobile and their MVNO's (Metro and Standup). It will NOT work with other CDMA carriers, and it is also not compatible with their MVNO (Visible, Xfinity Mobile, US Mobile, Cricket Wireless, etc).
- Compatibility with certain third-party devices and accessibility accessories, including some hearing aids, may vary depending on manufacturer support, Bluetooth protocols, software compatibility, and regional firmware limitations. For additional hearing aid compatibility information, please refer to Samsung’s official support documentation.
- Camera: 50 MP, f/1.8, (wide), 1/2.76", 0.64µm, AF | 50 MP, f/1.8, (wide), 1/2.76", 0.64µm, AF | 2 MP, f/2.4, (macro). Battery: 5000 mAh, non-removable | A power adapter is NOT included.
How access is obtained and maintained
Initial installation often needs physical access
Coalition guidance says stalkerware commonly requires physical access to an unlocked device. In the Android study, the installer granted extensive permissions after installing the app. This is why a person who briefly handles an unlocked phone can create a long-term risk even if they never touch it again.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteAndroid permissions and elevated access
The studied apps used existing Android APIs and requested broad permissions. The FTC’s SpyFone account said installers had to bypass device restrictions, and that rooting was required for some functions, including email monitoring. Rooting is an elevated-access condition for those functions, not a requirement for every spyware app.
Remote monitoring after setup
Once linked to an online portal, the studied apps could upload collected data and receive remote commands. The person monitoring the phone may therefore need physical access only for installation and permission approval, not for every later viewing or recording session.
Account and backup access is a separate route
Someone who controls an Apple, Google, email or other cloud account may obtain synchronized or backed-up information without installing the same kind of covert app. Treat account compromise, backup exposure and local spyware as related but distinct investigations.
Android and iPhone risks are not a simple ranking
The strongest technical evidence in this set is an analysis of 14 consumer Android spyware apps published in Proceedings on Privacy Enhancing Technologies in 2023. It demonstrates what those apps did under the researchers’ conditions; it is not a current audit of every Android release or commercial product.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Rank #4
- Please note, this device does not support E-SIM; This 4G model is compatible with all GSM networks worldwide outside of the U.S. In the US, ONLY compatible with T-Mobile and their MVNO's (Metro and Standup). It will NOT work with Verizon, Spectrum, AT&T, Total Wireless, other CDMA carriers, it is also not compatible with their MVNO (Visible, Xfinity Mobile, US Mobile, Cricket Wireless, etc).
- Compatibility with certain third-party devices and accessibility accessories, including some hearing aids, may vary depending on manufacturer support, Bluetooth protocols, software compatibility, and regional firmware limitations. For additional hearing aid compatibility information, please refer to Samsung’s official support documentation.
- 4G LTE Bands: B1/B3/B5/B7/B8/B20/B28/B38/B40/B41
- Display: Super AMOLED, 90Hz, 800 nits (HBM) | 6.7 inches, 110.2 cm2 (~86.0% screen-to-body ratio) | 1080 x 2340 pixels, 19.5:9 ratio (~385 ppi density)
- Camera: 50 MP, f/1.8, (wide), 1/2.76", 0.64µm, AF | 50 MP, f/1.8, (wide), 1/2.76", 0.64µm, AF | 2 MP, f/2.4, (macro)
For Apple devices, the Coalition’s documented route is access to iCloud backups in some situations. The sources do not provide a complete, current comparison of iOS and Android protections, so neither platform should be described as immune or universally less secure. The practical questions are how the software arrived, what permissions or credentials it received, whether the device is rooted or otherwise modified, and which accounts synchronize its data.
How common are these capabilities?
Two figures often repeated in discussions require careful labeling. Liu and colleagues cite Norton Labs’ report of a 63% increase in devices identified with spyware apps between September 2020 and May 2021, and Avast’s report of a 93% increase in spyware-app use in the UK over a similar period. In the paper these are secondary attributions, not a current worldwide prevalence measurement or an independently rechecked estimate.
The sample of 14 Android apps is useful for understanding mechanisms, but it cannot tell you how likely a particular person is to have spyware today. Product availability, detection rates and operating-system behavior change over time.
Warning signs and safer detection
Possible signs include unusually rapid battery drain, unexplained spikes in mobile-data use, unexpected notifications or unexplained changes in Screen Time. Each can have ordinary causes, and some stalkerware produces no obvious side effect. A person demonstrating unusually specific knowledge of your calls, messages or movements is an important contextual concern, but it is not proof by itself.
- Use a reputable antivirus or mobile-security scan when doing so is safe. The Coalition says good antivirus products should largely detect stalkerware, but no scan is a guarantee.
- Check installed apps, device-administrator or accessibility privileges, account sessions and cloud-backup access from a safer device when possible.
- Do not search for help on a phone you believe is monitored if the search itself could be visible. Use a device the suspected person has never accessed.
A clean scan does not rule out account compromise, a backup-based route or a product outside the scanner’s coverage.
Best Value
- GSM Unlocked: Enjoy seamless connectivity with your preferred GSM carrier. Compatible with T-Mobile, Metro PCS, AT&T, Cricket, Mint Mobile and other GSM networks. SIM card not included. For network compatibility, please check with your carrier. Note: Not compatible with CDMA networks like Verizon (Visible, Spectrum Mobile, US Mobile, Total Wireless, Straight Talk Wireless)
- Boundless Views: Enjoy immersive viewing on the spacious 6.5” HD+ display. Whether you're watching videos, browsing, or gaming, every detail comes through with stunning clarity.
- Smooth Performance, All Day: Powered by an efficient octa-core processor, the G35 ensures smooth performance for your everyday tasks. Enjoy faster app launches, seamless multitasking, and reliable speed.
- Snap, Share, Repeat: The G35 features a dual rear camera setup for sharp, detailed shots, and a front-facing camera that’s perfect for selfies and video calls. Capture every moment with ease and clarity.
- Effortless Access: Keep your phone secure with A.I. Face ID technology. Instantly unlock your G35 with just a glance. It's fast, easy, and secure.
Choose a response with safety, evidence and cost in mind
Removing monitoring can alert an abusive person, trigger retaliation or destroy evidence. The Coalition recommends creating a personalized safety plan with a trusted survivor-assistance or technology-safety service using a safer device before making major changes.
| Option | When it may fit | Risks and limits |
|---|---|---|
| Replace the phone | When a clean device can be obtained safely and the old device may be deeply compromised | The Coalition describes replacement as the best way to get rid of stalkerware, but it can be expensive and may alert the person monitoring you. Re-secure accounts before restoring data. |
| Factory reset | When replacement is not practical and evidence has been preserved | Described as almost as effective as replacement. Restoring a compromised backup or reinstalling the same app can recreate the problem. |
| Antivirus removal | When a scan identifies a threat and using the phone is safe | Detection coverage is incomplete, and deleting an app can remove evidence or alert an abuser. |
| Manual removal | When specialist Android guidance is available and the risk is understood | It may miss a second access route, require technical skill and provoke a response from the person monitoring the device. |
A safer order of operations
- Assess immediate danger. If discovery could cause violence, coercion or stalking, contact a local domestic-abuse or survivor-support service from a safer device before touching the phone.
- Preserve useful evidence. Record suspicious app names, notifications, account sessions or messages only when doing so will not increase risk. A reset can erase evidence.
- Secure accounts separately. From a trusted device, change passwords to strong, unique values and enable two-factor authentication where available. Review recovery addresses, trusted devices, active sessions and backup settings.
- Decide whether to replace, reset or remove. Consider money, transportation, housing, evidence needs, specialist help and the likelihood that the person will notice a change.
- Restore selectively. Do not automatically restore every app, configuration or backup. Reinstall only what is needed from official sources and review permissions.
Deleting spyware alone does not secure an exposed Apple, Google, email or social account. Conversely, changing an account password may not remove a locally installed app. Device and account cleanup must be treated as two separate tasks.
Collected data can expose other people too
Spyware creates a second privacy risk after collection: the service holding the data may be poorly secured. Liu and colleagues reported that some tested services sent sensitive data in plaintext or stored it in cloud systems with little protection.
In its September 2021 SpyFone announcement, the Federal Trade Commission said stored photos and texts were unencrypted, access controls were weak and purchaser passwords were sent in plaintext. The FTC also said a hacker accessed the company’s server in August 2018 and obtained personal data belonging to about 2,200 consumers. That is a case-specific enforcement finding, not a market-wide breach rate, but it shows that a stalkerware victim’s information may be exposed to criminals beyond the person who installed the app.
Samuel Levine, then Acting Director of the FTC’s Bureau of Consumer Protection, called SpyFone “a brazen brand name for a surveillance business that helped stalkers steal private information.”
The practical answer to the main questions
- Can spyware read text messages? Some documented products did, but access depends on the app, permissions, device state and message service.
- Can it track location? Yes, location collection and live GPS exposure are documented capabilities.
- Can it turn on the microphone or camera? Some Android apps studied in 2023 captured live audio or on-demand audio/video; this is not a universal capability.
- Can someone spy on an iPhone without installing an app? The reviewed evidence supports an iCloud-backup access route in some cases. It does not establish a universal method for reading every iPhone item without an app.
- Does spyware always require continued physical access? Often the initial installation and permission granting require an unlocked phone, while later monitoring can occur remotely. Account or backup access is a separate possibility.
Commercial spyware is therefore best understood as a set of conditional access paths, not a magical window into every phone. Identify the route—local app, elevated device access, account or backup—then make detection and cleanup decisions around personal safety, evidence and account security.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →
