An in-depth report on stalkerware apps: a technical assessment of their invasive surveillance capabilities, marketing for abusive spouses, security risks, more
Executive Summary — Persons who engage in technology-facilitated violence, abuse, and harassment sometimes install spyware on a targeted person's mobile phone. Tweets: @adam_senft , @einsteinsattic , and @caparsons Tweets: Adam Senft / @adam_senft : ICYMI: This week @citizenlab released a pair of reports on stalkerware: The Predator in Your Pocket (https://citizenlab.ca/...) and the legal and policy analysis “Installing Fear” (https://citizenlab.ca/...). Watch CBC's coverage of this report here https://www.youtube.com/... Phil Booth / @einsteinsattic : “#Spyware [with] powerful #surveillance capabilities is routinely marketed [for] intimate partner surveillance & parent-child or employee monitoring. When [this is] used to facilitate intimate partner violence, abuse or harassment, we call it #Stalkerware” https://citizenlab.ca/... Christopher Parsons / @caparsons : FYI! @citizenlab released a set of reports yesterday. 1/2: “The Predator in Your Pocket: A Multidisciplinary Assessment of the Stalkerware Application Industry” Exec summary (and full report!) available at: https://citizenlab.ca/... https://twitter.com/...
Context & Ripple Effects
This report lands mid-arc in the documentation of consumer-grade surveillance. Motherboard had already exposed how Retina-X and FlexiSpy sell phone-tapping tools to ordinary people, and the New York Times had traced abusers' use of smart locks, cameras, and lighting to control victims. What was missing was a systematic technical and legal audit of the stalkerware app market itself.
Citizen Lab fills that gap with a pair of reports — 'The Predator in Your Pocket' and 'Installing Fear' — pairing a capability assessment with legal analysis, weeks after Eva Galperin began building EFF support for stalkerware victims. The combination matters: it gives advocates and policymakers an evidentiary base, not just anecdotes.
First-order effects
- Stalkerware vendors are now documented on three fronts at once — invasive capability, marketing explicitly aimed at intimate-partner monitoring, and security flaws in the apps themselves — making 'it's just parental-control software' defenses harder to sustain.
Second-order effects
- Antivirus vendors and mobile platforms face pressure to detect and flag these apps rather than ignore them, while advocacy work like Galperin's gains a technical citation trail to press platforms and lawmakers with.
Third-order effects
- If the pattern holds, commercially sold spyware gets reclassified from a niche domestic-abuse tool into a recognized threat category — the framing that later shows up in Google TAG's inventory of roughly 40 commercial spyware vendors, and that extends beyond phones to school-device monitoring of the kind VICE reported on.
The trend: Consumer surveillance software is shifting from a gray-market product marketed to jealous spouses to a formally studied threat class tracked by researchers, platforms, and eventually governments.