Yes, under certain circumstances, an ex-partner can still access information on a smartphone or view individual data. However, this doesn't automatically mean that spyware has been installed or that the smartphone has been completely hacked. Especially after a breakup, there are often much simpler technical avenues of access: known passwords, shared user accounts, linked messaging devices, location sharing, cloud access, or devices still connected to an Apple or Google account.

Of particular relevance is the question of whether the ex-partner previously had physical access to the unlocked smartphone or knew the device code and passwords. This could mean that settings were changed, devices were linked, or sharing permissions were set up that remain in effect even after the breakup.

If you have a concrete suspicion, you shouldn't immediately delete all apps or reset your smartphone to factory settings. This could result in the loss of important digital evidence if it's later necessary to verify whether unauthorized access actually occurred. Depending on the device, professional smartphone forensics can examine apps, usage data, communication, location information, and other technical artifacts.

How can an ex-partner still access my smartphone?

There are various technical possibilities that need to be distinguished from one another.

An ex-partner might, for example, still have access to a shared or previously known user account. Existing messenger connections, location sharing, cloud access, or applications set up during a previous physical encounter are also possible.

A complete device compromise is only one possible explanation and should not be automatically assumed.

What is the most common cause after a breakup?

I cannot reliably name a universally valid most common cause.

In practice, however, the technically simple and immediately verifiable options should be considered first: known access data, registered devices, location sharing, messenger links and shared cloud accounts.

Only then should it be checked whether there are signs of unwanted software or further device compromise.

Can my ex monitor my phone if he knows my device passcode?

Knowing the device code is relevant for security.

If another person had additional physical access to the smartphone, they may be able to access personal data or settings, depending on the operating system and other security mechanisms.

If the previous device code might still be known, it should be changed.

Can my ex monitor my phone if he had it in his possession previously?

This is technically possible if the smartphone was unlocked or the device code was known.

During such access, settings could have been changed, location sharing enabled, messenger devices linked, or apps installed.

However, the fact that a person once held the device in their hand does not prove that any manipulations actually took place.

Can an ex-partner remotely monitor my mobile phone?

Yes, under certain conditions.

This does not necessarily require current physical access to the smartphone. Existing account sessions, linked devices, or location sharing can continue to function.

Even existing surveillance software could theoretically transmit data.

Can my ex monitor my smartphone without ever having touched it?

Certain access attempts can also be made without direct physical access, for example, if the login credentials of a user account have been compromised.

In contrast, many simpler forms of stalkerware or other local manipulations typically require at least prior access to the device.

The specific initial situation should therefore always be taken into account.

Can my ex access data through my Apple account?

If another person has access to your Apple account, different synchronized information may be affected, depending on the services that are enabled.

Therefore, check which devices are currently connected to the account and whether you can assign all entries.

Also check security-relevant account information.

What does an unknown device in an Apple account mean?

An unknown device should be checked.

It initially means that a device is connected to the account or listed there. However, this does not automatically imply who used it.

If evidence is needed later, a suspicious entry should first be documented before it is removed.

Can my ex access data through my Google account?

A single Google account can also be linked to multiple devices.

Depending on the services used, emails, contacts, calendar information, photos or other data can be synchronized.

Check logged-in devices and security-relevant sessions.

Can my ex see my Google Photos?

If a person has access to the relevant Google account or if sharing has been set up, synchronized photos may be accessible.

The smartphone itself does not need to be compromised for this to happen.

Can my ex see my iCloud photos?

If access to the corresponding Apple account or connected devices exists, synchronized data may be accessible depending on the activated services.

Here too, a distinction should be made between account access and actual smartphone hacking.

Can my ex read my WhatsApp messages?

One important test concerns linked devices.

If another device has been connected to WhatsApp , messages may be available there, depending on the specific configuration.

Therefore, check the currently linked devices and document any unknown entries.

Can my ex read my WhatsApp messages even though he no longer has my phone?

If a corresponding link has already been established, current physical access may not be necessary.

Therefore, it is relevant whether the ex-partner had previous access to the unlocked smartphone.

Can my ex read my Signal messages?

Even with a signal, connected devices can be relevant.

The specific functionality should be examined within the respective app. A compromised smartphone is not the only possible cause of a data breach.

Can my ex read my Telegram messages?

Telegram can be used on multiple devices. Therefore, if you suspect a problem, you should check active sessions and connected devices.

Unknown meetings should be documented and assessed from a security perspective.

Can my ex read my emails?

Yes, if access to the email account remains.

The email account is particularly important because it is frequently used to reset other user accounts or to receive security messages.

Check active sessions, devices, recovery information, and any forwarding rules.

Can my ex automatically forward my emails?

If access to the email account existed, forwarding or filtering rules may have been set up, depending on the provider.

Simply changing the password may therefore not be sufficient if such settings are not also checked.

Can my ex track my location?

Yes, if a corresponding location release or other technical tracking option exists.

Location information can be shared via Apple, Google, Messenger, or family features, among others.

No traditional spyware is required for this.

How can I identify an old location permission?

Check the location permissions of the operating system and the apps you are using.

Pay particular attention to checking people and accounts with whom you have a live location or persistent sharing agreement.

If there is a need for evidence, an unexpected release should first be documented.

Can my ex track me via "Where is?".

If location sharing is enabled within Apple services, location information can be shared.

The existence of such a release is technically distinct from spyware.

Can my ex track me via Google Maps?

Google services also allow location sharing.

If a previous sharing arrangement is still active, the other person may receive location information, depending on the configuration.

Could family sharing play a role?

Family features can connect different accounts and services.

Therefore, after a separation, it should be checked which family groups and permissions still exist.

Can my ex use an AirTag or other tracker?

Yes, external trackers are an alternative technical option for location tracking.

Therefore, if the main concern is that another person knows their exact location, the smartphone should not be the only thing examined.

Vehicles, bags, or other regularly carried items can also be relevant.

Could my ex have installed spyware on my phone?

This is technically possible in principle.

Of particular relevance is the question of whether the person had prolonged access to the unlocked smartphone and what permissions or installation options existed.

However, the mere possibility does not prove an actual spyware installation.

What is stalkerware?

Stalkerware refers to software that can be used for the secret or abusive monitoring of another person.

Depending on the application, location data, communication, or other smartphone information may be affected.

However, not every suspicious app is automatically stalkerware.

How can I detect stalkerware on my smartphone?

A simple visual inspection is not always sufficient.

Relevant factors may include installed applications, permissions, accessibility features, device management, configuration profiles, and other technical artifacts.

A forensic smartphone examination can analyze such data in greater depth, depending on the device.

Can my ex secretly turn on my microphone?

This is only possible if a corresponding technical access method exists.

The mere fact of a previous relationship or knowledge of the phone number does not permit arbitrary microphone access.

For example, an application would have to possess the necessary rights or the device would have to have been compromised in some other way.

Can my ex activate my camera remotely?

This also requires appropriate technical prerequisites.

An app with camera permission does not automatically mean that the camera has been misused.

Can my ex read my screen?

Under certain technical conditions, screen sharing, remote access software, or other methods may play a role.

Whether such a feature has been set up on a specific device must be examined using the smartphone as an example.

Can my ex see which websites I visit?

That depends on which accounts, browser synchronizations, or device accesses exist.

Browser data can be available across multiple devices, for example, via synchronized user accounts.

Here too, a data leak does not automatically mean that the smartphone itself has been hacked.

Can my ex see my search queries?

If browser or search histories are synchronized with a shared user account, this information may be available on other devices.

Therefore, also check browser and account synchronizations.

Can my ex see my calendar?

Calendars can be synchronized via cloud accounts or shared with other people.

If a former partner still knows about appointments, it should therefore be checked which calendar sharing permissions or account connections exist.

Can my ex see my contacts?

Contacts are also frequently synchronized with Apple, Google, Microsoft, or other accounts.

Therefore, an account that remains accessible can serve as a means of obtaining information without the smartphone having been completely taken over.

Can my ex see my call history?

This depends on the devices used, accounts, and possible access rights.

With physical access to the device, call logs may have been directly visible. Whether they are later accessible remotely depends on the specific platform and configuration.

Can my ex read my text messages?

Depending on the platform and connected devices, messages may be available on multiple devices.

If there is a corresponding suspicion, linked or synchronized devices should also be checked.

IT forensics in cases of suspected surveillance by a former partner

Suspected cases of private surveillance should be investigated objectively. LB Forensik supports private individuals with IT forensics services in Hanover , Dresden , and Stuttgart , among other locations . The crucial factor is not the suspicion of a specific surveillance method, but rather the technical examination of all possible avenues of information gathering.

What are some particularly concrete clues when there is suspicion of infidelity from an ex-partner?

Changes that coincide with a potential access point are particularly relevant.

This can include unknown devices, new location sharing permissions, unfamiliar messenger links, suspicious apps, changed security settings, or forwarding rules.

Even specific knowledge of information that was only accessible to a very limited group of people can help to narrow down the possible information pathway.

Is high battery consumption an indication of surveillance by the ex?

No.

Battery consumption is too unspecific and can be caused by numerous normal technical reasons.

Is a hot smartphone proof of spyware?

No.

Heat generation also has many harmless causes and is not sufficient for technical proof.

Are crackling noises during phone calls a sign of wiretapping?

No.

Mobile network, Wi-Fi, Bluetooth, or audio problems can cause such effects.

What could be a stronger indication than such symptoms?

A truly unknown device in the account, an unexplained location sharing, or a suspicious app with extensive permissions has significantly more technical significance.

What should I check myself now?

First, check your Apple or Google account, email account, messenger links, location sharing, and existing user accounts.

Next, check apps, permissions, and, if applicable, device management or configuration profiles.

What should I check in my Apple account?

Check connected devices, trusted phone numbers, and other security-related information.

Document any unknown entries if a later investigation is being considered.

What should I check in my Google account?

Check logged-in devices, sessions, and security-related activities.

Recovery information should also be checked.

What should I check in my email account?

Control active sessions, devices, forwards, filter rules, recovery addresses, and phone numbers.

The email account is of particular importance because it often serves as access to other accounts.

Should I change my passwords?

If the ex-partner knows passwords or unauthorized access to the account is plausible, the affected login details should be changed.

If the smartphone itself is under suspicion, use a different trusted device if possible.

Which passwords should I change first?

Priority is typically given to the main email account as well as the Apple account or Google account.

Next, other sensitive accounts should be checked.

Should I change the device code?

Yes, if the ex-partner knows or could know the previous code.

A new device code should not be easy to guess.

Should I remove unknown devices immediately?

In the event of an acute security risk, securing the account may take priority.

If later verification is important, unknown devices or sessions should be documented beforehand if possible.

Should I delete a suspicious app?

If there is a legitimate interest in obtaining evidence, this should preferably not be done before forensic preservation.

Uninstalling may remove relevant app data or other artifacts.

Should I immediately stop location sharing?

If unwanted location tracking affects your personal safety, stopping the tracking takes priority.

If there is no immediate danger and later documentation is required, the existing release can be documented initially.

Should I reset my smartphone to factory settings?

Not before a planned forensic investigation.

A reset can remove apps, configurations, and other relevant data.

Can a factory reset stop monitoring?

A reset can remove local apps and settings, but it does not automatically resolve a compromised online account.

If the same compromised accounts are subsequently re-established, the underlying security problem may persist.

Would a new smartphone help?

Not necessarily.

If the cause lies in the Apple, Google or email account, for example, it may persist on a new smartphone.

Would a new phone number help?

Not for all access methods.

A new phone number will not fix a compromised cloud account, an active email forwarding issue, or other account problems.

Is it possible to determine if the ex actually had access?

Under suitable conditions, apps, user accounts, device links, usage data and other technical artifacts can provide clues.

However, what statement is possible depends on the device, operating system, and available database.

Is it possible to determine how long the ex had access?

In some cases, time information can help narrow down the search.

However, a complete history of all accesses is not available in every system.

Is it possible to determine which data was viewed?

Not always.

A foreign device or an active session can prove possible access, but does not necessarily document every single message or photo that was actually viewed.

Is it possible to find out if my ex copied photos?

That depends on the possible transmission method.

Messengers, cloud services, AirDrop, Quick Share, email or other methods can leave various digital traces.

Is it possible to find out if my ex has deleted messages?

Under certain conditions, deleted messages or remaining artifacts can be examined.

However, a full recovery is not guaranteed.

Is there a way to find out if my ex has installed an app?

Depending on the device, current or previous app artifacts may provide clues to an installation.

An application that has already been completely removed can be more difficult to detect.

Can deleted stalkerware still be detected?

In some cases, remaining technical artifacts may indicate a previous installation.

Whether such traces are still present depends on the device, the time of removal, and subsequent use.

Can smartphone forensics help in such cases?

Yes, if there is a specific technical question.

LB Forensik's existing smartphone forensics includes, among other things, the analysis of communication, location, app, and usage data. This allows an investigation to differentiate between various possible access methods.

Why should the investigation be open-ended?

Because the assumption "My ex installed spyware" is only a hypothesis.

The actual cause may be much simpler: a still-connected device, a known password, an old location sharing setting, or a shared user account.

A professional investigation should therefore not confirm a desired theory, but rather evaluate the existing digital traces.

What does a negative test result mean?

A negative finding means that no reliable evidence of the specific issue being sought was found within the examined database.

It does not automatically prove that no unauthorized access ever occurred.

When should I have my smartphone professionally examined?

An investigation may be useful if specific unknown devices, apps, account accesses or permissions have been detected, or if the ex-partner repeatedly knows information whose origin cannot be explained.

Even if there is a later legal interest in obtaining evidence, structured preservation and documentation may be necessary.

Practical example: The ex knows the current location

A person notices after a breakup that their former partner knows their current whereabouts on several occasions.

Instead of immediately assuming spyware, location sharing, family features, cloud accounts and external trackers are first checked as possible causes.

Only then will it be investigated whether there are indications of actual device compromise.

Practical example: The ex knows private WhatsApp content

The former partner is aware of the content of messages written after the breakup.

The investigation should first check whether unknown messenger devices are connected and whether there was previous physical access to the unlocked smartphone.

This can provide a technically simpler explanation than sophisticated spyware.

Practical example: Unknown device in Apple account

After a breakup, a person discovers a device they cannot identify.

The entry is documented. Account security, connected devices, and other relevant settings are then checked.

The technical findings initially show a connection to the account, but not automatically the user's identity.

Practical example: Suspicious app after previous device access

The former partner had regular access to the unlocked smartphone during the relationship. After the breakup, an unknown application with extensive permissions was discovered.

If evidence is needed, the data is not deleted immediately. Instead, the application, permissions, and other technical information are saved and analyzed.

FAQ: Can an ex-partner monitor my mobile phone?

Can my ex continue to monitor my phone after the breakup?

Yes, under certain conditions, for example via existing account access, device links or permissions.

Can my ex monitor my phone if he knows my PIN?

A known device code increases the risk if the person has or had physical access to the smartphone.

Can my ex monitor my phone without touching it?

Certain account accesses or previously established connections may continue to exist without current physical access.

Can my ex read my WhatsApp messages?

Under certain circumstances, linked devices can play a role. These should be checked if there is any suspicion of a problem.

Can my ex read my emails?

Yes, provided that access to the relevant email account remains.

Can my ex see my photos?

If access to a synchronized cloud account exists, photos stored there may be accessible.

Can my ex see my location?

Yes, if a corresponding location sharing, account connection or other location tracking option exists.

Can my ex track me via "Where is?".

If Apple location sharing is enabled, location information can be shared.

Can my ex track me via Google Maps?

Google services also support location sharing. These should be checked if there is any suspicion of location activity.

Could my ex have installed spyware?

Technically, this is possible, especially if there was prolonged access to the unlocked smartphone. However, the possibility alone is not proof.

How do I recognize stalkerware?

Potentially relevant factors include unknown apps, extensive permissions, device management, and other technical anomalies.

Is high battery consumption a sign of stalkerware?

No. Battery consumption is too nonspecific and has numerous normal causes.

Are crackling noises a sign that my ex is listening in on me?

No. Disrupted conversations are not reliable evidence of wiretapping.

Can my ex turn on my microphone?

Only if a corresponding technical access method exists. The previous relationship alone does not make this possible.

Can my ex turn on my camera?

This would also require appropriate technical prerequisites.

Should I change my passwords?

Yes, if the ex-partner knows them or if unauthorized access is plausible.

Should I change the device code?

Yes, if the existing code could be known.

Should I reset my phone immediately?

Not before a planned forensic investigation, if possible digital traces are to be preserved.

Should I delete suspicious apps?

If evidence is needed later, it is best not to secure it before technical measures are taken.

Can smartphone forensics determine if my ex had access?

Under suitable conditions, devices, apps, accounts, shares and other technical artifacts can provide relevant clues.

Can forensic science prove that my ex was the person behind the access?

Not automatically. The technical detection of access and the personal attribution are two different issues.

Can deleted spyware still be found?

Remaining artifacts may provide some clues. A complete reconstruction is not guaranteed.

Can a new smartphone solve the problem?

Not necessarily, if compromised user accounts are subsequently used unchanged.

When should I seek professional help?

In cases involving specific unfamiliar devices, suspicious apps, unexplained account access, location sharing, or recurring information leaks, a forensic investigation may be advisable.

After a breakup, first check accounts and permissions; don't immediately suspect spyware.

If an ex-partner still has access to private information, the worry quickly arises that the smartphone is being secretly monitored. Technically, this is indeed possible, but a complete device compromise is only one of several explanations.

Existing location sharing permissions, known passwords, synchronized cloud accounts, linked messenger devices, or previously shared devices may already be sufficient for information access.

A thorough investigation therefore begins with the specific information known to the ex-partner. It then examines where this data was stored and through which services or devices it could have been accessed.

Only then should the question be explored in more detail as to whether stalkerware, spyware or another form of smartphone compromise is actually present.

This open-ended approach is particularly important if the results are to be technically verifiable or documented in a legal context later on.

Back to knowledge overview