This guide explains how to check an Android phone’s apps and permissions and use Google Play Protect when you suspect spyware. Unusual battery drain or slow performance alone does not prove an infection.
Recognizing the Red Flags
Look for apps you do not recognize, unexpected permission requests and changes in battery or data usage. These are reasons to investigate, rather than proof of spyware: demanding apps, updates and an ageing battery can also affect performance. If the phone is hot, also review how heat affects a phone and how to protect it before treating temperature alone as evidence of spyware.
How to check an Android phone for suspicious apps
1. Review installed apps
Open Settings and look for Apps or Manage apps. Review unfamiliar entries, including apps you did not install yourself. Check the developer and purpose before removing an app; unfamiliar system components are not automatically malicious.
2. Review app permissions
Open an app’s settings and inspect Permissions. Question access to the camera, microphone, location or contacts when it has no clear connection to the app’s purpose. Menu names vary by manufacturer and Android version.
3. Compare battery and data usage
Use your phone’s Battery and mobile data settings to identify apps with unexpectedly high usage. Review what those apps are doing before drawing a conclusion. Low usage does not rule out spyware.
4. Check Google Play Protect
On an Android device with Google Play, open the Play Store, tap your profile icon and select Play Protect. In its settings, keep Scan apps with Play Protect enabled. Follow any warnings about harmful apps. Play Protect checks apps and periodically scans the device, but a clean result is not a guarantee that every threat has been detected.
Google’s Play Protect instructions explain what it can check. This feature is for Android devices with Google Play; it is not an iPhone scanner.
What to do if concerns remain
Keep Android and your apps updated, review warnings and contact the device manufacturer or a trusted technician if suspicious behavior continues. Record the app name and the warning you saw so you can explain the problem clearly.