The standard advice for detecting spyware on Android has not changed in ten years. Check your battery stats. Look for apps you do not recognize. Monitor your data usage. Run an antivirus scan.
We wrote about why that ritual is broken a few days ago. The short version: it was designed for a world where spyware was a foreign object planted by a specific attacker. That is not the threat anymore. The surveillance on your phone is mostly apps you installed yourself, running trackers you never agreed to, collecting data you never knew about.
So here is the version that actually works.
Step 1: stop looking for symptoms
Battery drain, overheating, and mysterious data usage are symptoms of bad software in general. A poorly coded game drains your battery. A background sync eats data. These signals tell you something is wrong with your phone. They do not tell you what is watching you.
Modern spyware and commercial trackers are optimized for stealth. They batch network requests, wait for WiFi, and piggyback on legitimate app traffic. You will not see them in your battery stats because their engineers made sure of that.
If you are looking for symptoms, you are looking in the wrong place.
Step 2: look at what your apps actually contain
The only reliable way to know what is inside an app is to look inside the app. Not at its Play Store listing. Not at its privacy label. At the actual compiled code.
Static analysis tools can extract tracker signatures from an app’s bytecode without running it. They look for known SDK class names, network endpoints, and permission patterns that match commercial tracking libraries. You can see how this detection methodology works in detail. This is how researchers audit apps, and it is how we found an average of 7 trackers per app in the most popular Play Store downloads.
AppXpose does this on your device in about three seconds. No root, no ADB, no packet sniffer. Pick an app, tap scan, see what is inside. But the tool matters less than the habit. However you do it, the point is to look.
Step 3: check your permissions, actually check them
Go to Settings, then Privacy, then Permission Manager. Open “Location” and read the list.
Every Android user we have talked to has found at least one surprise in that list. An app they granted location to years ago, for a feature they used once, that has been quietly receiving GPS coordinates ever since.
Revoke anything that does not make sense. Most apps will keep working. The ones that break were using the permission for something you would not have agreed to if you had been paying attention.
Do the same for Microphone, Camera, and Contacts. These are the four permissions that matter most for surveillance, and they are the four that apps request most aggressively.
Step 4: audit the apps you actually use
You do not need to scan every app on your phone in one sitting. Start with five. Pick the ones you open every day: your messaging app, your browser, your weather app, your social media, your banking app. For example, check the scan results for WhatsApp or Instagram’s tracker profile to see what everyday apps actually contain.
For each one, ask three questions:
- How many trackers does it contain? Anything above 5 deserves a closer look. Anything above 10 is a red flag.
- What permissions does it have? Compare what it asks for with what it actually does. A flashlight app with location access is not asking for your benefit.
- Is there an alternative? If two apps do the same thing and one has 2 trackers and the other has 11, the choice is straightforward.
This is not paranoia. This is the same logic you apply to anything else. You read nutrition labels. You compare prices. You check reviews. You just never had the label for your apps before.
Step 5: watch for changes
The scan you did today is a snapshot. Apps change. Updates add new SDKs, request new permissions, and introduce new tracking endpoints. The app you scanned last month might not be the same app today.
This is why ongoing monitoring matters more than a one-time audit. Permission creep happens silently, in routine updates, without notification. If you are not watching, you will not notice.
What this will not do
This process will not make your phone surveillance-free. It cannot. The Android ecosystem runs on advertising, and advertising runs on data collection. Our research across 3,745 analyzed apps confirms that even the cleanest app on your phone probably has at least one analytics SDK.
But it will shift the balance. You will know what you are running. You will have made conscious decisions instead of default ones. And the next time an app asks for your microphone at 7am on a Tuesday, you will know to ask why.
That is not a complete fix. But it is a real one, which puts it ahead of every battery drain checklist ever written.