This is the question we are asked more than any other. The honest answer is that it turns on one thing: whether the person being monitored knows and has agreed. Everything else is detail — but the detail differs sharply depending on where you are.
The principle everywhere: consent
Different legal systems arrive at the same place by different routes. Intercepting someone else’s communications without authority is prohibited under the US federal Wiretap Act, under the UK’s Investigatory Powers Act and Computer Misuse Act 1990, and under the ePrivacy and data protection rules across the EU.
Accessing a device you are not authorised to use is a separate offence again — the Computer Fraud and Abuse Act in the US, the Computer Misuse Act in the UK. Installing software on someone else’s phone without permission generally engages both.
Your own device
Straightforward. On a phone you own and use yourself, configure whatever you like: find-my-device, backups, theft protection.
The line is crossed when you hand that device to someone else to use and do not tell them what is running on it. Ownership does not create a right to listen — what the law protects is the communication, not the hardware.
Children
Parents have both authority and a duty of care, and most jurisdictions accommodate reasonable supervision of a minor. But “reasonable” narrows as a child gets older, and a teenager has privacy rights of their own.
| Age | Generally defensible |
|---|---|
| Up to about 12 | Open supervision, shared review of the device, filters and time limits |
| 13 to 15 | Disclosed measures with a specific reason; location rather than message content |
| 16 and over | Effectively only with the young person’s agreement |
Three conditions apply throughout: the measure should be proportionate to the concern, it should be disclosed, and it should have an end date. Open-ended monitoring with no triggering event is hard to defend at any age. The practical side is covered in parental controls for WhatsApp.
Partners and spouses
Short answer: no. Marriage and cohabitation create no right of surveillance anywhere. Installing monitoring software on a partner’s phone, reading their messages or tracking their location without consent is unlawful — regardless of who pays the bill or whose name is on the contract.
Employees and company devices
A company phone belongs to the company, which still does not permit unrestricted monitoring. In the UK and EU, data protection law requires a lawful basis, proportionality and transparency — and in practice a data protection impact assessment for anything systematic. In the US the position varies by state, with several requiring notice.
What holds up in practice:
- A written policy stating what is collected and why, acknowledged by staff
- Consultation with employee representatives where they exist
- A clear position on personal use — permitting it narrows what you may lawfully examine
- Data minimisation: vehicle location for scheduling is not the same as reading messages
- Covert monitoring without a specific, serious and documented suspicion
Four rules that prevent most disputes
-
Tell people first
Someone who knows a feature is active has not been secretly monitored. This is the single largest distinction, legally and personally.
-
Match the measure to the concern
If the worry is the walk to school, location answers it. Message content does not become necessary just because it is available.
-
Set an end date
A time-limited measure is defensible. An indefinite one usually is not. Put a review date in the calendar.
-
Allow it to be withdrawn
Consent only counts while it is freely given and revocable. Someone who cannot say no has not said yes.
How those requirements translate into an actual configuration is described under the spy app page and features — including what simply does not work without access to the device.
Frequently asked questions
Is it legal to track my child’s phone?
Generally yes for a younger child, as part of ordinary parental supervision, and strongest when disclosed. It weakens as the child approaches adulthood. Covert monitoring of an older teenager is legally risky in most jurisdictions.
Can I monitor my partner’s phone if I suspect cheating?
No. There is no jurisdiction in which suspicion creates a right to intercept an adult’s communications. Doing so is a criminal offence in the US, the UK and across the EU, and the material is usually inadmissible anyway.
Does owning the phone make it legal?
No. The protection attaches to the communication and the user’s privacy, not to the hardware. Handing someone a phone while concealing monitoring software does not become lawful because you bought it.
Can my employer read messages on my work phone?
Only within the limits of local employment and data protection law, and normally only where you were told in advance. Where personal use is permitted, the employer’s scope narrows considerably.
What happens to covertly obtained evidence in court?
It is frequently excluded, because the other party’s privacy rights outweigh its value. Obtaining it can also constitute an offence in itself, which tends to work against the person who produced it.
