Stalkerware: The Hidden Enemy on Mobile Phones
By Shuaib S. Agaka
The rise of stalkerware is a growing crisis that demands urgent scrutiny. These spyware applications, designed to secretly monitor individuals’ phones without their consent, are increasingly being used by jealous partners, overbearing parents, and even employers under the guise of “security.” But let’s be clear—this is nothing more than digital invasion, a dangerous tool that enables abuse, harassment, and profound violations of privacy. What’s worse, the companies behind these apps have a long history of negligence, leaving millions of users exposed to hackers and cybercriminals. Despite these glaring dangers, many continue to fall into the trap of using them, lured by false promises of safety and control.
In recent years, several stalkerware companies have suffered devastating data breaches, leaking sensitive personal information such as call logs, messages, and even private photos. Imagine trusting an app to “protect” your relationship or monitor your children, only for that very app to expose you and your loved ones to unimaginable risks. This year alone, companies like Spyzie, Cocospy, and Spyic experienced massive breaches, compromising users worldwide. Spyzie exposed 518,643 unique customer email addresses, Cocospy leaked 1.81 million, and Spyic disclosed 880,167. After removing duplicates, these breaches collectively affected over 3.2 million individuals.
These numbers are not mere statistics—they represent real people now vulnerable to hacking, scams, blackmail, and worse. In a country like Nigeria, where cybercrime is already a significant threat, such leaks are particularly perilous. Personal information in the wrong hands can be weaponized for fraud, extortion, or even physical harm. Yet, because many users fail to fully grasp the risks, they continue to install these apps, unknowingly placing themselves and others in harm’s way.
The situation is especially alarming given how stalkerware is being deployed globally. Many of these apps masquerade as tools for parental control or employee monitoring, but in reality, they are often used to spy on partners, exes, or rivals. Domestic violence cases have surged in recent years, and stalkerware has become a powerful tool for abusers to maintain control over their victims. A survey by NPR found that 75% of domestic abuse shelters had worked with victims who were tracked using stalkerware. This underscores the devastating human cost of these invasive technologies.
In Nigeria, the Cybercrimes (Prohibition, Prevention, etc.) Act of 2015 criminalizes unauthorized access to private data. However, enforcement remains weak, and few perpetrators face legal consequences for using stalkerware. This lack of accountability perpetuates the problem, leaving victims with little recourse and abusers emboldened to continue their invasive behavior.
The irony is that these stalkerware companies claim to provide security, yet they are among the least secure platforms available. Time and again, hackers have exposed their vulnerabilities, revealing how poorly they safeguard user data. The companies behind these apps prioritize profit over people, and when exposed, they simply rebrand and continue their unethical operations. Meanwhile, unsuspecting users who fall for their marketing gimmicks are left exposed, their personal data sold to the highest bidder or exploited by malicious actors.
We must ask ourselves: is it worth it? Do we truly need to spy on our partners, children, or employees at the cost of endangering ourselves and others? The truth is, there are safer, more ethical alternatives to ensure security without violating privacy. Parents can utilize built-in parental control features available on Apple and Android devices. Employers can adopt transparent policies that respect employees’ rights and avoid covert surveillance. And as individuals, we must reject the toxic mindset that normalizes spying on others. What begins as “just checking” can quickly escalate into an obsession that erodes trust and destroys relationships.
We can no longer afford to ignore this issue. It is time to demand stronger enforcement of the Cybercrimes Act, ensuring that those who use stalkerware illegally are held accountable. Tech companies and app stores must take a more proactive role in banning and detecting these apps before they can cause further harm. The National Information Technology Development Agency (NITDA) should also step up its efforts to raise awareness about the dangers of stalkerware, educating Nigerians about the risks and legal implications of using these invasive tools. Public campaigns, workshops, and digital literacy programs are essential to empower citizens to protect themselves from spyware and unauthorized surveillance.
Most importantly, we must take personal responsibility for our digital safety. If you suspect you are being spied on, watch for signs such as unusual battery drain, overheating, or unfamiliar background apps on your phone. Install reputable security tools to detect and remove spyware, and consider resetting your device if necessary.
Stalkerware thrives on fear and insecurity, convincing people they need it when, in reality, it only exacerbates harm. It is time to wake up to this reality. We must educate ourselves, safeguard our privacy, and refuse to support an industry that profits from exploitation and surveillance. The more we allow stalkerware to proliferate, the more we endanger ourselves, our loved ones, and our society. The time to say no to digital surveillance is now—before it’s too late.
Shuaib S. Agaka, a tech journalist, writes from the PRNigeria Centre in Kano State.
