5 things people believe about phone spying. Only one is true.
The one that's true: no permission, no access. An app can't touch your camera or microphone without the permission you gave it. Everything follows from that — including the thing nobody tells you, which is that permission says who can. It never says who did.
Phone privacy attracts more confident nonsense than almost any other everyday tech subject. Some of it is harmless, some of it gives people a false sense of security, and one belief in the list below is doing real work.
Here they are, ranked roughly by how often I hear them.
1. "My phone listens to my conversations for ads"
This is the big one, and it's the one almost everyone gets wrong.
There is no good evidence that mainstream apps transcribe your conversations to sell advertising. Researchers have gone looking repeatedly. What they keep finding is tracking, not listening — and continuously streaming audio from billions of phones would be expensive, visible in battery and network usage, and detectable by anyone doing traffic analysis.
The uncanny ad is explained by duller things: what you searched, where you've been, who was physically near you and what they searched, and an advertising profile detailed enough to predict an interest before you've articulated it. Add the fact that you ignore hundreds of ads a day and only notice the one that matches what's already in your head.
That's a real privacy problem. It's just a different one, and blaming the microphone means fixing the wrong thing. Longer version here.
2. "The green dot means I'm covered"
On Android 12 and newer, a small green dot appears in the corner whenever an app uses your camera or microphone. It's real and it works exactly as advertised.
It also lasts about five seconds, and it keeps no record.
Think about where your phone is for most of the day: in a pocket, face down on a table, charging in another room while you're asleep. The indicator does its job in the dark, to nobody, and then it's gone. It's a status light, not a smoke alarm — it only helps if you happen to be looking at the exact moment.
What the green dot does and doesn't cover.
3. "Tape over the camera and you're done"
A camera cover works. Nothing gets seen through a covered lens, it costs about a pound, and there's no reason not to own one. I'm not going to talk anyone out of it.
What it doesn't do is anything about your microphone — which, for most realistic privacy concerns, is the sensor that matters more. And it tells you nothing about what was accessing the camera in the first place. You've covered the lens without ever finding out whether anything was looking through it.
Tape is a lid on the problem. It isn't an answer to it.
4. "Airplane mode stops apps recording"
This one is worth knowing because it's the belief most likely to make someone act carelessly.
Airplane mode turns off the radios — cellular, Wi-Fi, Bluetooth. It does not turn off the sensors. Your camera and microphone work perfectly well offline; that's why you can film a video on a plane.
So anything captured while you're offline can simply be written to storage and uploaded later, the moment you reconnect. Airplane mode delays transmission. It doesn't prevent capture.
If you actually want the sensors off, Android has proper switches for that: pull down Quick Settings, tap edit, and add the Camera access and Mic access tiles. Those cut the sensor for every app on the phone, and apps receive silence rather than an error.
5. "No permission, no access"
Finally, one that holds up.
On Android, an app cannot open your camera or microphone without the permission you granted it. There's no normal API that gets around this. This is the single most important fact about phone privacy, and it's the reason the permission list is the thing worth your attention:
Settings → Privacy → Permission manager
Two honest caveats. The realistic risks aren't mysterious exploits — they're permissions you granted years ago during setup and never revisited, and monitoring software installed by someone with physical access to your phone, which was granted its permissions the same way anything else is. Both live in that list. Both are visible if you look.
Here's how to audit and revoke it properly — it takes about ten minutes and it's the highest-value privacy change most people can make.
The part nobody tells you
Here's where the true one stops being reassuring.
Permission says who can. It never says who did, or when.
You can spend ten minutes tidying that list and end up with fifteen apps that legitimately need your camera or microphone. Good — that's the right outcome. But now the useful question has changed. It isn't "can this app reach my camera?" any more. You've answered that. It's "how often does it, and at what time, and was my screen locked?"
And Android writes all of that down and tells you about none of it. The Privacy dashboard keeps 24 hours on Android 12, 7 days from Android 13 — no durations, no lock state, and never a word at the moment it actually happens.
That gap is what Spytrap fills. It alerts you the second an app opens your camera or mic, including on the lock screen, and keeps the log: which app, when, for how long, with background access flagged as background. You can revoke access in one tap from the alert.
It runs entirely on-device — one-time $0.99, no account, no cloud, nothing uploaded. And to be straight about what it isn't: no Android app can block another app's camera, mine included. It can tell you, and it can take you to the switch. Anything claiming more than that is overclaiming.
Get Spytrap on Google Play — $0.99 →