Decision sheet — What a tracker can do
How does a phone tracker work?
A phone tracker is an app or a built-in service that reads data the phone's own operating system lets it read. Each kind of data sits behind its own permission: location, SMS, microphone, contacts and call log are separate switches on Android, and location on iPhone has its own levels from Never to Always. Nothing reaches the app until the person holding the unlocked phone allows it, and you can see and revoke every one of those switches in Settings.
- Read7–9 min read
- You needThe phone in your hand, unlocked
- Works onAndroid (app permissions) · iPhone (Location Services, Safety Check)
Verified: October 2026 against Apple, Google and FTC official help pages.
A tracking app can use only the data the device and its user allow it to access. Location, activity and message content are different permissions with different rules, and they must not be bundled into one promise. If an app or a website claims all of them at once from a phone number, it is describing something the operating system does not offer.
How to see what a tracker can reach on your own phone
- Identify the exact device and account. A tracker works on one phone signed in to one account. Write down which phone, which Apple or Google account and which app you are asking about before you read anything else — most confusion comes from mixing two devices or two accounts.
- Open the app's permission page. On Android go to Settings → Apps → the app → Permissions; each permission is a separate line you can set to Allow or Don't allow. On iPhone go to Settings → Privacy & Security → Location Services → the app, and read which level it holds: Never, Ask Next Time Or When I Share, While Using the App, or Always.
- Check precise versus approximate location. Android's help says approximate location only tells the app your device is in an area of about 3 square kilometres. On iPhone, turning off Precise Location for an app leaves it with only your approximate location.
- Read the store's data disclosure, and treat it as a claim. Google Play's Data safety section is written by the developer, and Google states that its security review does not verify the accuracy and completeness of that disclosure. Compare it with what the permission page actually shows.
- Look at recent access, not just settings. Android's privacy dashboard lists which apps used which permissions and when — the last 7 days on Android 13, 24 hours on Android 12. On iPhone, the arrow icon in the status bar appears while an app is using Location Services.
- Test only the feature the owner enabled. If you set up location sharing on your own phone or a child's phone, test that one feature and confirm it behaves as the settings say. Do not assume a feature you did not see in the permission list exists.
Which situation are you in?
Pick the case that matches you. Each one has a different honest expectation of what a tracker can do.
You can see everything it can reach.
Every permission the app holds is visible on your own phone. On Android, Settings → Apps → the app → Permissions lists location, SMS, microphone, contacts, call log and the rest as separate lines. On iPhone, Location Services shows the level each app holds, from Never to Always, and a separate Precise Location switch for each app.
Do this: Open the permission page, switch off anything the app does not need, and re-check in a week.
Use the family tools built for this.
Family features such as Google Family Link location or sharing in Apple's Find My are designed to be set up on the child's device and visible to the family. They depend on the child's phone being on, connected and set to share location; they are not a hidden feed.
Do this: Set it up together, explain what is shared, and agree when it will end.
Location sharing, started on their phone.
The honest route is for the other adult to start sharing from their own phone — Find My on iPhone, or Google location sharing on Android. They choose the duration and can stop at any time. On Apple, the person they stop sharing with is not notified, which is part of their control.
Do this: Ask them to share from their device; never configure it for them on a phone you borrowed.
Treat it as a claim to verify.
Location, messages and calls are separate permissions. On Android, Google Play restricts SMS and call log access to apps registered as the default SMS, Phone or Assistant handler, with only limited exceptions. An app that says it reads all of them at once, from a number, is promising more than the platform hands out.
Do this: Read its permission list before installing; if the list does not match the promise, do not install.
Check your own phone first.
The FTC describes covert monitoring apps as usually installed by someone with physical access to the phone, sometimes on a rooted or jailbroken device, and hidden under bland names such as “System Service”. Signs include faster battery drain, unexpected data use, overheating and unexpected restarts.
Do this: If you are in an abusive situation, talk to a domestic violence advocate before removing anything — the FTC warns an abuser may escalate if they suspect you are cutting off their access.
What a permission does not give an app
- Location is not messages
- On Android, “Access your device's location” and “Send and check SMS messages” are two different permissions. Granting one does not grant the other, and each can be switched off on its own. The SIM and SMS guide covers message access in detail.
- Microphone, contacts and call log are their own switches
- Android lists “Record audio”, “Access your contacts” and “Read and write your phone call log” as separate permissions. Android also has device-wide Camera access and Microphone access switches under Settings → Security & privacy → Privacy controls.
- “Ask every time” ends with the app
- With Android's “Ask every time or allow when you share”, the app asks each time you open it and can use your location until you close it. It does not keep a standing permission.
- “While using” is not “always”
- Android's “Allow only while using the app” and iPhone's “While Using the App” stop the app from reading location when it is not in use. Only “Allow all the time” or “Always” allow background access.
- A store label is a claim, not a check
- Google Play's Data safety section is filled in by the developer. Google says its review does not verify the accuracy and completeness of that disclosure, so the permission page on your phone is the better evidence.
- Settings change over time
- Android can automatically remove permissions for apps you have not used for a while, and can pause their activity. A tracker that worked last month may have lost access since — check the permission page again.
Where each permission lives on your phone
| Android | iPhone | |
|---|---|---|
| Location levels | All the time · Only while using · Ask every time · Don't allow | Never · Ask Next Time Or When I Share · While Using the App · Always |
| Precise vs approximate | Approximate = an area, not the exact location | Precise Location switch per app; off = approximate |
| How location is worked out | GPS, Wi-Fi, mobile networks and sensors (with Location Accuracy on) | Cellular, Wi-Fi, GPS networks and Bluetooth |
| SMS / call log | Separate permissions; Google Play restricts both groups | The official help does not describe a third-party permission for this |
| See recent use | Privacy dashboard: 7 days (Android 13), 24 h (Android 12) | Arrow icon in status bar while an app uses location |
| Review and stop sharing | Settings → Apps → Permissions | Safety Check (iOS 16+): Manage Sharing & Access or Emergency Reset |
| What the review cannot see | Store disclosures are written by the developer and not verified | Safety Check cannot review non-Apple accounts or social media sharing |
Pick the tool for the job
You lost your own phone
Use the finder that is already part of the operating system — Find My on iPhone, Find Hub on Android, SmartThings Find on Galaxy — signed in to your own account. No extra tracker is needed.
You want family to see where you are
Share your location from your own phone with Find My or Google location sharing, for an hour, a day or until you stop. That is a tracker the person being located controls.
You worry an app is watching you
Open the permission page and the privacy dashboard or Safety Check on your phone. Those tools show what each app holds; they are more reliable than any outside scanner.
You were told a number is enough
It is not. A permission is granted on the phone itself. Read the page on tracking by number before paying anyone for a lookup.
This site does not sell tracking and does not run lookups. It explains what the permission systems on Android and iPhone allow, so you can audit your own phone, set up open family sharing for a child in your care, or agree on location sharing with another adult who chooses to share. Services that promise full access to a phone you do not hold are describing access the operating system does not grant.
Official sources (checked October 2026)
- Google — Change app permissions on your Android phone
- Google — Manage your Android device's location settings
- Google — Check app activity in the Android privacy dashboard
- Apple — Turn Location Services and GPS on or off
- Apple — Safety Check for an iPhone with iOS 16 or later
- FTC — Stalkerware: what to know
Questions people ask
Can a tracker use my microphone or contacts if I gave it location access?
No. On Android, location, microphone (“Record audio”), contacts and call log are separate permissions, each set to Allow or Don't allow on its own. You can also turn off Microphone access for the whole device under Privacy controls.
What is the difference between precise and approximate location?
Precise location means the app can tell your device's exact location. Approximate location only tells it the area the device is in — the GPS guide explains how large that area is. On iPhone you switch this with the Precise Location toggle for each app.
Can an app read my location when I am not using it?
Only if you allowed it. On Android that is “Allow all the time”; on iPhone it is “Always”. “While using the app” settings stop location access when the app is not on screen.
How do I see which apps used my location recently?
On Android, open Settings → Security and Privacy (or Privacy) → Privacy dashboard; it covers the last 7 days on Android 13 or 24 hours on Android 12. On iPhone, an arrow appears in the status bar while an app uses Location Services, and Location Services lists the level each app holds.
How do I stop sharing with everyone on iPhone?
Use Safety Check in Settings → Privacy & Security → Safety Check (iOS 16 or later). Emergency Reset stops sharing with all people and apps at once; Manage Sharing & Access lets you choose. It cannot review non-Apple accounts or social media sharing.
How would a covert monitoring app get onto a phone?
According to the FTC, usually through someone with physical access to the phone, and some need a rooted or jailbroken device. They often hide under bland names. They do not arrive from a phone number.
Can this site show me what a phone tracker sees on another person's phone?
No. This site explains the permission systems so you can check your own phone or set up open sharing with family. It does not access any device.