How to Spot Spyware or Stalkerware on Your iPhone

What It Is

Stalkerware is monitoring software someone installs on your iPhone — usually with just a few minutes of physical access — so they can quietly read your messages, track your location, or see your photos without your knowledge. It doesn't show up the way a computer virus does. There's no infected download, no suspicious link you clicked. The clearest sign is behavioral, not technical: the person knows things they shouldn't — your exact location when you never shared it, the contents of a private conversation, or who you've been texting.

That's a different threat than someone reading your screen over your shoulder on a train or in a coffee shop. Shoulder surfing needs the person nearby, in the moment. Stalkerware keeps working long after they've walked away. Below: the specific, checkable signs on your iPhone, the tools Apple actually built for this, and why the honest answer is narrower — and more useful — than "just install an antivirus app."

How It Actually Works

Why iPhone "spyware scanner" apps don't work

iOS keeps every app in its own sandbox, with no visibility into other apps or the system. That's deliberate design, not a gap — but it means a third-party app genuinely cannot scan your iPhone for spyware the way antivirus software scans a Windows PC or an Android phone. When EFF and AV-Comparatives tested antivirus detection of stalkerware in 2025, the whole test — the whole premise of "antivirus catches stalkerware" — was Android-only. There's no iOS equivalent, because the architecture doesn't allow one. Any App Store listing claiming to scan your iPhone for spyware is selling something iOS simply doesn't permit.

What you can actually check

A few things are genuinely visible, and worth ten minutes of your time:

• Unknown configuration profiles. Go to Settings > General > VPN & Device Management. A profile you didn't install — especially a mobile device management (MDM) profile — can grant someone visibility into your device or location. Find one you don't recognize, and the device isn't managed by an employer or school? Worth investigating before you remove it.
• Apps you don't remember installing. Scroll your home screen and app library for anything unfamiliar. You can also check which apps have access to your photos directly in Settings > Privacy & Security.
• Run Safety Check. Under Settings > Privacy & Security > Safety Check, Apple built a tool for exactly this situation: it shows what's currently shared with people and apps, and resets it in one step — Apple's own recommended path, not a third-party scanner.
• Battery drain and data usage can be a secondary signal, but don't lean on them alone — plenty of ordinary apps cause both.

Why It Matters For Your Privacy

Checking for stalkerware isn't about catching someone doing something wrong. It's about your right to decide who has access to your own location, conversations, and photos. That framing shapes what you should do next, too. If you do find something, the FTC's guidance is to be careful about acting on the phone itself — removing a profile or app can alert whoever installed it, and that's not a safe outcome in every situation. Research and reach out for help from a separate, trusted device instead: a friend's phone, a library computer, anything other than the one you suspect is compromised.

It's also worth knowing what protects you even when someone already has your passcode — which, realistically, is the more common scenario. Not a remote hack, but a partner or family member with physical access. Stolen Device Protection requires biometrics for sensitive actions like viewing saved passwords, and adds an hour's delay plus a second Face ID or Touch ID check before your Apple Account password can change. That delay exists specifically so someone who knows your passcode can't instantly lock you out of your own accounts.

How Privara Handles This

None of the checks above stop someone with your passcode from just opening an app and looking at whatever's sitting in your camera roll, notes, or contacts in plain view. Privara closes that gap. It keeps your most private photos, videos, documents, and contacts behind one AES-256-encrypted vault that looks and works exactly like an ordinary calculator — there's no "Privara" icon for anyone to notice, let alone open. The vault unlocks only when you enter your PIN into the calculator, with Face ID or Touch ID layered on top, and it captures a photo of anyone who tries the wrong PIN. No account required, nothing uploaded anywhere by default — it's a local, zero-knowledge vault, and a separate decoy PIN can open a second vault if you ever need to hand your phone to someone. One vault, four kinds of content protected the same way: photos, videos, documents, and contacts. Download Privara on the App Store to set it up in a few minutes.