App to track messages on someone else's phone

I’ve spent years testing monitoring software, parental controls, and the ugly side of phone surveillance tools. I’ve also helped people detect and remove stalkerware from their devices. When someone asks me about an “app to track messages on someone else’s phone,” it’s rarely a simple question. The intent behind it changes everything — worried parent, suspicious partner, employer monitoring a work device, or someone checking if they’re being watched themselves.

So let’s walk through the questions I hear most, straight up, without the sanitized marketing talk. I’ll cover what these apps actually do, how they’re installed, and where the line between legitimate monitoring and illegal surveillance is drawn.

Common Questions

Can I read someone’s text messages without touching their phone?

No — not with any tool that has a legitimate use. If you see an ad promising “read their texts just by entering their number,” it’s a scam. Every working message-tracking app requires physical access to the target device at least once, or the person’s iCloud/Google account credentials.

So there’s no app that secretly forwards all their messages?

There are apps that do exactly that, but they don’t work by magic. mSpy, FlexiSPY, and uMobix will forward messages, call logs, and app activity to a dashboard you can check from anywhere. But every single one needs installation on the phone you want to monitor. On an iPhone without jailbreak, you’ll need the target’s iCloud credentials and two-factor code. On Android, you’ll sideload an .apk and grant invasive permissions like accessibility and notification access. Without those steps, the apps sit dead.

Are these tracking apps even legal?

That depends on three things: who you’re monitoring, what you monitor, and where you live. In most countries, installing hidden tracking software on someone else’s phone without their knowledge is illegal — full stop. In the U.S., it can violate the federal Wiretap Act and state computer crime laws. The exception: you own the device, and it’s used by your child under 18. Even then, local laws vary. If you’re monitoring an employee on a company-owned phone, you typically need written consent and a clear policy.

Expert Questions

What’s the difference between a monitoring app and stalkerware?

The difference is purpose and disclosure. Monitoring apps (like Qustodio, Bark, or Norton Family) are upfront — they show an icon, send regular reminders that monitoring is active, and are designed for parents managing kids’ screen time. They don’t try to hide their existence. Stalkerware (mSpy, FlexiSPY, TheTruthSpy, and many others) actively hides its icon, clears logs, and runs silently in the background. It’s built for surveillance, not safety. The Coalition Against Stalkerware keeps a technical definition: any tool that can be covertly installed and conceals its presence from the device user.

Do these apps require rooting or jailbreaking?

Some features do, especially on the more aggressive tools. FlexiSPY demands rooting for advanced call interception and ambient recording. mSpy offers a “without jailbreak” version for iPhones, but it’s limited to iCloud backups — meaning you won’t get real-time message forwarding unless the phone is jailbroken. On Android, many work without root if you manually enable accessibility services and ignore Play Protect warnings. That’s still a manual, hands-on process.

What are the signs that someone put a tracking app on my phone?

Check for these:
• Battery draining faster than usual, even when idle.
• Phone getting hot when you’re not using it heavily.
• Unexplained data usage spikes.
• Unknown apps in the app list (look for generic names like “Device Service” or “Update Helper”).
• Android: A persistent notification reading “App using accessibility” or similar.
• iPhone: Profiles under Settings > General > Device Management that you didn’t install.
If you spot more than one of these, dig deeper.

Strategic Questions

I’m a parent who wants to read my child’s messages. What’s the smartest approach?

Start with a transparent conversation. Kids who know they’re being monitored — and why — tend to build healthier digital habits. After that, use a visible parental control app like Bark or Family Link. These won’t show you every message verbatim by default, but they flag risky content (cyberbullying, self-harm, predators) and keep you in the loop without suffocating their privacy. If you absolutely need full message logs, Qustodio will show them on Android if you set it up with the child’s knowledge. The key is disclosure: a hidden spy tool damages trust and may push a teen toward burner phones or secret apps.

How do I safely remove a hidden monitoring app from my own device?

Don’t just delete the icon. Many stalkerware apps bury persistence mechanisms. On Android, first revoke accessibility and device admin permissions in Settings. Then reboot into safe mode and look for suspicious apps with package names that don’t match their labels. Use a tool like Malwarebytes or Certo Anti-Spyware to scan. On iPhones, check for unfamiliar profiles, remove them, and change your Apple ID password immediately. A full factory reset (restoring from a backup made before the app was installed) is the cleanest route. If you think the tracker was installed by someone with physical access, change all your passwords, enable two-factor authentication, and consider contacting local support services for domestic abuse survivors — they often have digital privacy specialists.

Questions to Ask Yourself

Before you search for an app that tracks someone else’s messages, pause and go through these:

Why am I doing this? If it’s fear or a lack of trust, a tracking app won’t fix that. It often escalates the problem and creates legal liability for you.

Have I asked for consent? On a child’s phone, consent means an age-appropriate conversation. On an employee’s phone, it means signed documentation. On a partner’s phone, the lack of consent turns it into surveillance.

What’s the least invasive way to get what I need? Often, a conversation, a shared location feature like Find My, or a privacy-safe monitoring tool does the job without crossing ethical lines.

Could someone be doing this to me right now? If you landed here because something felt off on your phone, trust your gut. Run the checks I mentioned in the expert section. There’s no shame in scanning your own device — and if you find a hidden app, document everything before you remove it. That evidence can matter.

None of this is simple. But knowing how these tools actually work — and the weight they carry — can prevent a bad situation from turning into a much worse one.