Those looking for monitoring apps are usually after one of two very different things: keeping an eye on a child, or finding out if their own device has anything installed without authorization. This guide addresses both, separating what is legitimate from what is sold as if it were.
The three categories that actually exist
Transparent parental supervision
Designed for minors, with the app visible on the device. Controls screen time, approves installations, filters content, and displays location. It's free in its official versions and legal because parents and guardians exercise parental authority.
Corporate device management
The so-called MDM, contracted by the company for devices it provides, allows for the application of security policies, the installation of applications, and the remote erasure of data in case of loss. It is legal as long as the policy is communicated in writing and limited to professional use—the employee's personal device is excluded.
Location with consent
Mutual sharing between adults who have agreed to it, like families accompanying each other when someone arrives home. It works because both parties know, see, and can turn it off whenever they want.
Beyond those three, what remains is hidden surveillance software. Installing this on another adult's cell phone without their knowledge is a crime. Article 154-A of the Penal Code, with a penalty of imprisonment from 1 to 4 years and a fine.
What to use in each case
- Son on Android: Google Family Link. Free, official, with time limits per app and download approval.
- Son on iPhone: Screen Time, native, with content limits and restrictions through Family Sharing.
- Lost device: Find My Device on Android and Find My iPhone. They sound an alarm, show the device on a map, and can be remotely locked and erased.
- Family-friendly location: The native function of Google Maps or Apple Search, with an invitation accepted by both parties.
Google Family Link
AndroidWhat doesn't exist, no matter how much they advertise it.
It's worth knowing the three promises that appear most frequently and don't hold up:
- “"Monitor using only the number."” Without installation on the device or account credentials, there is no access. No exceptions.
- “"See who visited your profile."” Instagram, Facebook, and WhatsApp do not provide this data to third parties. Apps that promise to do so show a fabricated list, usually compiled from your most frequent contacts, and charge a subscription fee for it.
- “"100% invisible forever."” Android requires persistent notification for accessibility permissions, and Play Protect flags these types of programs. The invisibility lasts until the next update.
How to know if your cell phone is being monitored.
This is the part that most people need and least people look for. No single sign proves anything, but the sum of several requires verification.
Behavioral signs
- Battery life is dropping much faster than normal, with no change in usage.
- The appliance is hot even when it's not in use.
- Data consumption is higher than usual — the program needs to send information externally.
- Slowness, freezes, or unexplained restarts.
Where to look, in practice
- Settings › Accessibility. It's the most commonly used entry point. Any active service that you don't recognize deserves to be turned off.
- Settings › Applications, displaying the system's data. Look for generic names such as "Service", "Sync", "Update Service".
- Security › Device administration apps. A surveillance program often registers there to make removal more difficult.
- Data usage per application. Something unknown consuming a lot of data in the background is a strong sign.
- WhatsApp › Connected devices. Sessions that you haven't opened mean that someone is reading your conversations right now.
- Play Protect. Run a manual scan; it identifies a good portion of that category.
If you find something
Back up only your photos and documents, restore the device to factory settings, and change the passwords from there. other The device—starting with the Google or Apple account, with two-step verification enabled. Changing the password on the compromised device is useless: whatever is installed captures the new one.
If the monitoring comes from someone you live with, consider seeking help before removing it: in situations of domestic violence, sudden removal can escalate the risk. The Women's Helpline, by 180, provides free guidance.
Frequently Asked Questions
Can I monitor my child without him knowing?
Legally, you have this right as the responsible party, but the official tools are deliberately disclosed. Overt supervision educates and sustains the relationship; hidden supervision often proves costly when discovered.
Is it legal for the company to monitor the cell phone they gave me?
Yes, on a company device, with a written policy and limited to professional use. Personal devices are not included in this, even if you use them for work.
Does the monitoring app appear in the menu?
The official ones, yes. The hidden ones try to conceal themselves, but they leave a trail in terms of accessibility, device administrators, data consumption, and battery life.
Does a factory reset remove any monitoring?
Remove virtually everything from this category. The important thing is not to restore an old backup that brings the program back, and to change the passwords on another device.
Is there a good free version?
For what is legitimate, yes: Family Link, Screen Time, Find My Device, and Find My iPhone are all free and provided by the system's manufacturer.
In summary
Legitimate monitoring is transparent by definition: the child knows, the employee is informed, and the family member has consented. What is sold as invisible is a crime when applied to an adult, and most of the time it doesn't even work. If your question is about the device itself, start with accessibility, connected devices, and data consumption—you'll have the answer in ten minutes.
How to use it in practice
- Enable installation approval. It prevents new apps from appearing without your knowledge, which is half the problem.
- Set a limit per application, not just a total limit. Allowing free study time and restricting short video time works better than a single limit.
- Use the official tool. Google Family Link on Android and Screen Time on iPhone: free, visible on the device, and without requiring you to disable any protection.
- Combine before configuring. With a teenage child, an agreement on what will be monitored is worth more than any restriction—and survives discovery better.
What goes wrong most often?
- Don't believe promises of monitoring based solely on a phone number; it doesn't exist.
- Installing hidden software on an adult's cell phone is a crime under article 154-A, punishable by 1 to 4 years imprisonment.
- Relying on evidence obtained through unauthorized access in a legal proceeding—it is discarded and exposes whoever produced it.
- Expecting to read WhatsApp conversations: end-to-end encryption prevents this, for any tool.
The alternative that is already included in the system
To find a lost device, Find My Device and Find My iPhone are free and come standard: they sound an alarm even when the device is on silent, show it on a map, and remotely lock and erase it. It's worth checking today if they are activated — once lost, you can't configure them anymore.
Company cell phone: what the employer can monitor
The discussion about monitoring almost always revolves around family, leaving out the scenario in which it is most common and legitimate: the corporate environment. It's important to distinguish between what is acceptable and what is not.
The rule governing this matter is the expectation of privacy. With a work tool, provided by the company for professional use and with a written privacy policy, the expectation is low—and monitoring is permitted. With a personal device, it is high, and the same monitoring becomes an invasion of privacy.
Admitted, when there is a clear and signed policy.
- Inventory of applications installed on the corporate device.
- Password requirement, encryption, and automatic locking.
- Remote locking and erasure in case of loss or shutdown.
- Access to corporate email, which is a company tool.
- Device location during the workday, when justified by the function, such as during deliveries and field service.
Outside the limits, even with company equipment.
- Read personal conversations on a worker's messaging app.
- Activate camera or microphone remotely.
- Track location outside of work hours.
- To monitor without informing, looking for evidence to be caught in the act.
Covert monitoring is usually the worst possible deal for a company: in addition to the risk of compensation claims, the evidence obtained in this way tends to be discarded in labor lawsuits, and the situation is reversed.
Work profile on Android: the separation that few people know about.
Android allows you to create a separate space within the same device, with your own applications, marked by a briefcase icon. This is the work profile, and it exists precisely to resolve the conflict between control and privacy.
What's inside your profile is managed by the company. What's outside isn't. This applies to apps, files, accounts, and notifications. Your personal gallery, personal messaging app, and personal browser history are outside the reach of the administration.
What does the manager see in the corporate profile?
- Which work applications are installed and in which version?.
- If the device has a password, encryption, and the system version.
- If the device has had its manufacturer unlock changed.
- Corporate network usage and compliance with defined rules.
The administrator does not read personal messages and does not see photos in the personal gallery. When the relationship ends, they only delete the work profile, and the rest of the device remains intact.
BYOD: when the device is yours and the email is from the company.
The acronym stands for "bring your own device" and describes the most common arrangement in Brazil: the employee uses their own cell phone and installs the corporate email.
Here's a practical warning. When adding a corporate account, the system may ask you to install a management profile. By accepting, you grant the company permissions over the device — including, in some configurations, the ability to remotely erase content.
Before accepting, three questions are worth asking directly to the technology sector:
- Does remote wiping affect the entire device or just corporate data?
- Can the company see the list of installed personal applications?
- What happens to my device on the day it's switched off?
If the answer to the first question is "the entire device," the reasonable alternative is to request the installation of a separate work profile, which solves the company's problem without putting your family photos at risk.
How to check what is being managed on your device
People don't always remember what they've agreed to. The verification takes two minutes and shows any active administration, whether corporate or not.
On Android
- Open Settings and search for “administration” or “device administration apps”.
- See the list of apps with administrator privileges. Company security and location apps legitimately appear here.
- In Settings, also look for accessibility and review which apps have the service enabled. It's the most powerful system permission and the least monitored by people.
- If a work profile exists, it appears as a separate tab in the app drawer and in Accounts.
On iPhone
- Open Settings, then General, and look for VPN and Device Management.
- If a profile is installed, it will be listed there, along with the organization's name and the permissions it grants.
- Personal devices, without corporate ties, typically do not display this entry.
Removing a corporate profile removes access to company tools. Do not do this yourself on a work device without notifying the administrator.
When leaving the company, the order matters.
The shutdown is where people unnecessarily lose personal data, because remote wiping is usually triggered on the same day.
- Save photos and personal documents to a personal account. before of the last day.
- Transfer ownership of the phone line if the number is yours and the plan was with the company. This negotiation needs to happen before the disconnection.
- Remove your corporate account from your personal devices, including your watch, tablet, and home computer.
- Revoke corporate applications' access to your personal accounts on each service's security page.
Whoever does this in the correct sequence hands over the clean device and leaves without losing anything that was theirs.
