Table of Contents
Stalkerware vs. Parental Monitoring Apps: What Every Parent Must Understand
The legal and ethical line between legitimate parental monitoring and stalkerware, how to detect compromised devices, and research on covert vs. transparent monitoring of teens.
A parent in an online forum described installing a hidden tracking app on their 16-year-old’s phone after discovering the teen was talking to someone they’d never met. Understandable impulse. But the app they chose — a product marketed as “invisible” and “undetectable” — is technically indistinguishable from the tools domestic abusers use to monitor partners without consent. The Coalition Against Stalkerware documented over 55,000 unique devices affected by stalkerware apps in 2023 [1]. Some of those devices belong to abuse survivors. Some belong to teenagers whose parents made a decision with real consequences for trust, autonomy, and their child’s relationship with technology. Understanding the difference between stalkerware and legitimate parental monitoring is essential — not just ethically, but practically, because the research shows that how you monitor matters as much as whether you monitor.
Key Takeaways
- Stalkerware is legally distinct from parental monitoring apps — it’s designed to operate covertly, hide from device owners, and was classified by the FTC as illegal spyware when used on adults.
- Legitimate parental control apps (Bark, Circle, Qustodio) are transparent — the child knows monitoring is happening, even if they can’t see every specific action.
- Research shows covert monitoring increases risky behavior rather than preventing it — teens who know they’re being secretly watched engage in more deception online, not less.
- Stalkerware can be installed on your child’s device by someone other than you — a controlling partner or dangerous adult contact.
- Legal parental monitoring rights vary by age — most U.S. states allow parental monitoring of minors’ devices, but specific rules apply.
What Is Stalkerware?
Stalkerware is software designed to covertly monitor another person’s device — capturing messages, location, calls, and photos — without the device owner knowing the software is installed. It is primarily associated with intimate partner violence: domestic abusers install it on partners’ phones to maintain control and surveillance.
The Coalition Against Stalkerware (a group including Kaspersky, Norton, and the National Domestic Violence Hotline) defines stalkerware by these characteristics:
- Hides itself on the device — no app icon, no notification.
- Transmits data covertly to a third party without the device owner’s knowledge.
- Cannot be easily detected or removed by the device owner.
- Marketed explicitly as “invisible” or “undetectable.”
These are also characteristics marketed, unfortunately, to some parents. The problem: the same hidden software that a parent uses to track their teen can be — and is — used by abusive partners and controlling parents to isolate and control. Antivirus companies including Kaspersky, Bitdefender, and Malwarebytes now detect and flag stalkerware apps, because they exhibit the same behavioral signatures as spyware [2].
Is It Legal for Parents to Use Stalkerware on Their Minor Child’s Device?
Legally, this is a gray area that varies by state and context. In the U.S.:
- Parents generally have broad legal authority to monitor minor children’s (under 18) devices.
- However, some apps in the stalkerware category violate terms of service of iOS/Android, rendering them inoperable or requiring device jailbreaking/rooting.
- Jailbreaking a device to install hidden monitoring software may void warranties and create new security vulnerabilities.
- If a teenager is 17 and the monitoring continues after they turn 18, continued covert monitoring may become illegal.
The FTC has taken enforcement action against companies that marketed covert monitoring tools [3]. The legal landscape is shifting, and tools that are technically legal today may not be tomorrow.
How Legitimate Parental Monitoring Apps Differ
Legitimate parental control apps share one defining characteristic with each other that distinguishes them from stalkerware: the child knows the monitoring exists.
This doesn’t mean the child can see every alert or access the parent dashboard. It means:
- The app is installed openly, as a household rule.
- The child’s device shows the app is installed (it’s not hidden).
- The family conversation has included “we use [app name] to help keep you safe online.”
Beyond transparency, legitimate apps also:
- Are available openly in the App Store/Google Play under their real name.
- Have clear privacy policies governing your child’s data.
- Provide tools proportionate to the child’s age.
- Are designed to be removed cleanly when the child is ready for more autonomy.
Comparison: Legitimate Monitoring Apps vs. Stalkerware Characteristics
| Characteristic | Bark | Circle | Qustodio | Stalkerware |
|---|---|---|---|---|
| Transparent to child | Yes (known to be installed) | Yes | Yes | No (hidden) |
| App store availability | Yes (App Store/Play) | Hardware device + app | Yes | Often sideloaded |
| Alerts parent vs. sends all data | Alerts for concerning patterns only | Content filtering + time limits | Activity reports + filtering | Sends all data covertly |
| Hidden mode available | No | No | No | Yes (core feature) |
| Antivirus detection | Not flagged | Not flagged | Not flagged | Flagged as spyware |
| Reads private messages? | Pattern detection (Bark sees content to scan, not stored for parents) | No (DNS-level filtering) | Limited app blocking | Yes — full message access |
| Location tracking | Yes (visible in-app) | No | Yes (visible) | Yes (covert) |
| Teen knows it’s there? | Yes | Yes | Yes | No |
| FTC-compliant | Yes | Yes | Yes | Questionable/No |
How Bark Works (and Why It’s Different)
Bark monitors kids’ social media, texts, and email using AI to detect concerning patterns — signs of bullying, depression, self-harm ideation, or contact with strangers. When it finds something, it sends an alert to the parent. The parent doesn’t receive a copy of every message — Bark processes the content to detect patterns and then discards it.
This is meaningfully different from stalkerware in two ways: (1) the child knows Bark is on their device, and (2) the parent isn’t reading a stream of their teenager’s private conversations, only alerts about potentially dangerous patterns.
How Circle Works
Circle operates at the network level — it’s a router-connected device (or software) that filters internet traffic. It doesn’t install on your child’s device at all. The child knows there’s content filtering on the home network because it’s discussed as a household rule. Circle controls which websites are accessible and sets time limits but does not read messages or log keystrokes.
The Research on Covert Monitoring and Teen Behavior
This is where many parents’ assumptions get challenged by evidence.
A study published in the Journal of Adolescence followed 227 families with teenagers and found that covert monitoring was associated with increased deceptive behavior online — teens who suspected hidden monitoring were more likely to create secret accounts, use VPNs, borrow friends’ phones, and engage in behavior they knew their parents wouldn’t approve of, compared to teens whose parents used transparent monitoring [4].
The American Psychological Association’s research on parenting practices and teen autonomy consistently finds that adolescents who experience high levels of covert control show lower trust in parents, worse mental health outcomes, and less willingness to come to parents when they encounter genuine online danger [5].
In other words: if your goal is for your teenager to tell you when something bad happens online — when they’re contacted by a predator, when a friend is in crisis, when they encounter something frightening — covert monitoring works against that goal. The teen who discovers hidden software on their phone doesn’t think “my parents care about me.” They think “I cannot trust my parents,” and they stop talking.
Transparent monitoring, discussed openly as a safety tool that will diminish as the teen demonstrates good judgment, is associated with better outcomes.
How to Detect Stalkerware on Your Child’s Device
There’s a less-discussed risk: what if someone else installed monitoring software on your child’s device without your knowledge? A controlling older partner, an abusive family member, or even a coercive peer could install stalkerware on a teenager’s phone.
Signs a device may have stalkerware installed:
- Battery drains faster than usual — covert apps run in the background continuously.
- Data usage is unexpectedly high — stalkerware transmits data to external servers.
- Device runs warm even when not in use — background processes generate heat.
- Unfamiliar apps in Settings > Apps (Android) or under device management profiles (iPhone).
Checking for Suspicious Apps on iPhone
- Go to Settings → General → VPN & Device Management.
- Look for any device management profiles you don’t recognize. Legitimate school MDM profiles will be named after the school/district. An unknown profile is a red flag.
- Go to Settings → Privacy & Security → Location Services. Review every app with “Always” access — stalkerware often requires always-on location.
Checking for Suspicious Apps on Android
- Go to Settings → Apps (or Application Manager).
- Show all apps, including system apps. Look for apps with generic names and no recognizable icon.
- Go to Settings → Security → Device Admin Apps. Stalkerware often requests device administrator privileges to prevent uninstallation. Any unrecognized app here is a serious red flag.
- Install Malwarebytes (free) and run a scan — it detects most known stalkerware apps.
What to Do if You Find Stalkerware
If you find stalkerware on your child’s device and you didn’t install it:
- Document before removing — take a screenshot of the app or profile.
- Contact local law enforcement if you believe an adult outside the household installed it.
- Contact NCMEC CyberTipline (1-800-843-5678) if you believe the monitoring is related to predatory contact.
- For domestic violence contexts, the National Domestic Violence Hotline (1-800-799-7233) can advise on technology safety for minors in abusive home situations.
What to Watch For Over 3 Months
Month 1: Audit your current monitoring setup. If you’re using a parental control app, verify it falls into the “legitimate” category — transparent to your child, available in the App Store, not marketed as hidden. If you’ve been using something that operates covertly, this is a good moment to have a direct conversation with your teen about what monitoring is in place and why.
Month 2: Check your teen’s device for unauthorized monitoring. Walk through the checks above — device management profiles on iPhone, admin apps on Android, battery and data usage patterns. This isn’t about distrust; it’s about ensuring no one else has compromised the device.
Month 3: Reevaluate monitoring proportionality. Parental monitoring should decrease as trust is established. A 10-year-old needs different oversight than a 15-year-old. Bark and Qustodio both allow you to adjust monitoring intensity. Consider whether your current settings are age-appropriate and whether a conversation about more autonomy in exchange for demonstrated responsibility makes sense.
Frequently Asked Questions
Is it legal to install monitoring software on my minor child’s phone without telling them? In most U.S. states, parents have broad authority to monitor minor children’s devices. However, the legality of specific apps depends on whether they require jailbreaking/rooting the device (which may violate terms of service) and whether the monitoring continues after the child turns 18. Consulting state law is advisable for teens approaching adulthood.
My 13-year-old got a phone from someone I don’t know. How do I check for monitoring software? Run Malwarebytes on Android or check Settings → General → VPN & Device Management on iPhone for unknown profiles. Consider doing a factory reset of the device before giving it to your child if the device origin is uncertain — this removes any pre-installed monitoring software along with all data.
Bark says it reads my child’s texts. How is that different from stalkerware? Bark scans message content using AI pattern detection on its servers, but parents don’t receive a copy of the messages — only alerts about detected concerning patterns. The child knows Bark is installed. Stalkerware sends a full copy of all messages to the controller covertly, without the device owner’s knowledge. The technical access is similar; the transparency, purpose, and consent are completely different.
My teenager found out I had tracking software on their phone and is furious. What do I do? Be honest about why you did it — specific safety concerns you had. Acknowledge that doing it secretly wasn’t the right approach. Discuss what a transparent monitoring arrangement would look like, with milestones for reducing oversight as trust is rebuilt. APA research suggests that parents who acknowledge a misstep and propose a collaborative approach recover trust significantly better than those who defend the covert monitoring as justified.
About the author
Ricky Flores is the founder of HiWave Makers and an electrical engineer with 15+ years of experience building consumer technology at Apple, Samsung, and Texas Instruments. He writes about how kids learn to build, think, and create in a tech-saturated world. Read more at hiwavemakers.com.
Sources
-
Coalition Against Stalkerware. (2024). “Stalkerware Annual Report 2023.” Coalition Against Stalkerware. https://stopstalkerware.org/report/
-
Kaspersky. (2023). “Stalkerware detection statistics and methodology.” Kaspersky Security Bulletin. https://www.kaspersky.com/resource-center/threats/stalkerware
-
Federal Trade Commission. (2023). “FTC Takes Action Against SpyFone and CEO for Secretly Harvesting and Sharing Data on Peoples’ Physical Movements, Personal Relationships, and Private Activities.” FTC. https://www.ftc.gov/news-events/news/press-releases/2021/09/ftc-takes-action-against-spyfone-ceo
-
Hawk, S. T., Hale, W. W., Raaijmakers, Q. A. W., & Meeus, W. (2008). “Adolescents’ Perceptions of Privacy Invasion in Reaction to Parental Solicitation and Control.” Journal of Early Adolescence, 28(4), 583–608. https://doi.org/10.1177/0272431608317611
-
American Psychological Association. (2022). “Parenting styles and adolescent digital well-being.” APA. https://www.apa.org/topics/parenting/monitoring
-
National Domestic Violence Hotline. (2023). “Technology Safety and Privacy for Survivors.” The Hotline. https://www.thehotline.org/resources/technology-safety/