They gave me this Android, or set it up for me
This is a genuinely higher risk situation, and it is worth saying why without alarming you.
Hidden monitoring almost always needs someone to have had the phone in their hands and to have known the passcode. If they handed you the phone, they had both, for as long as they wanted, before you ever touched it.
That does not mean they did anything. It means the checks below are more worth your time than they would be otherwise.
Using iPhone instead? Read the iPhone version of this page.
Before you change anything, please read this
If someone is monitoring you, the moment they lose that access is often the moment things get more dangerous. Family violence services see this pattern often enough that it shapes all of their advice.
So, three things before you touch a setting:
- Do not uninstall an app you suspect, and do not factory reset your phone, as your first move. It can tell the other person that you know.
- Removing it also removes the proof. If you might ever want to go to the police, that proof matters.
- Talk to someone first. 1800RESPECT is free, confidential and open 24 hours, on 1800 737 732. Call from a phone you trust, not from the one you are worried about.
None of this means you have to keep a phone you do not trust. It means the order matters, and the safest order starts with a plan and a person, not with a delete button.
One more thing worth knowing now. Talking about this near the phone can be enough. If monitoring software is running, it may be able to hear the room. Have this conversation somewhere else, or on another device.
1. Whose Google account is this phone signed into?
This is the most important question, and it is often overlooked.
Open Settings, then Passwords & accounts (on Samsung, Accounts and backup, then Manage accounts), or Settings then Google. Whose account is listed?
If the phone is signed into their account, they can see a great deal, including backups, photos and location, and none of it requires anything hidden. That is your answer, and it is a big one. It is also not something to change quickly without thinking about safety first.
2. Is the device managed?
Android phones can be managed the way an employer manages a work phone. Open Settings and look for a line saying the device is managed by an organisation, often under Security or About phone. Look also for a separate Work tab in your app drawer, which means a work profile exists.
If you have no employer reason for that, it is significant.
3. Device admin apps
Settings, then Security (Security and privacy, then More security settings on Samsung), then Device admin apps. If you cannot find it, search your settings for device admin. An app with device admin rights can be very hard to remove, which is exactly why monitoring tools ask for it.
4. Accessibility
Settings, then Accessibility (on some phones, including Oppo and Xiaomi, it sits under Additional settings, so search your settings for Accessibility if it is not there). This permission lets an app read your screen, and it is the single most common route for Android monitoring apps. Look hard at anything switched on that you did not switch on.
5. Family Link
If Family Link is set up on the phone by someone else, they can see activity and control the device. Check Settings, then Google, then Parental controls.
6. Apps you did not install
Settings, then Apps, then See all apps. This shows more than your home screen does. Use the menu to show system apps as well, and look for bland names like Device Health, System Service or Backup Manager that you cannot account for.
7. Play Protect and unknown sources
Open the Play Store, tap your profile picture, then Play Protect, and make sure scanning is on. Then check Settings, Apps, Special app access, Install unknown apps, and see which apps are allowed to install others.
What if the phone is not really yours
If the account, the plan and the phone all belong to someone else, then the honest answer is that you cannot make that phone private, and no amount of settings will change it.
The realistic answer is a different phone, a new account made on that phone, and a new email address first, because email is what everything else is recovered through.
Family violence services can help with this, and some can help with getting a phone. 1800RESPECT on 1800 737 732 is the place to start, from a phone you trust.
What this page will not do
We will not tell you your phone is clean. Nobody honest can.
Monitoring software that is any good is built to hide, and the reliable way to find it is a forensic examination of the phone, usually done by police. Any website or app promising to scan your phone and give you a yes or no answer is overselling what it can do, and most of them are selling something. We are a not-for-profit and there is nothing to buy at the end of this.
Next: what to do, in a safe order
Where to get real help
- In immediate danger: call 000.
- 1800RESPECT: 1800 737 732. Free, confidential, 24 hours, by phone or online chat. For anyone affected by domestic, family or sexual violence.
- Police assistance line: 131 444, for threats to your safety that are not an emergency.
- WESNET Safety Net Australia: techsafety.org.au. Specialists in technology and family violence. If you use an Android phone and you think spyware may be on it, they ask people to contact them from a safe device.
- eSafety Commissioner: esafety.gov.au. The national regulator. It has legal powers to help with serious online abuse, including image-based abuse.