My Phone Is Being Tracked — What to Do About It Now

Before assuming deliberate surveillance, rule out the mundane explanations first — they account for the large majority of "how does he/she know where I am" situations. Then, methodically, rule out the deliberate ones.

Check the ordinary explanations first

• Family Sharing / location sharing. Apple's Find My and Google's Family Link let anyone you've shared location with see it indefinitely, often set up years earlier and forgotten.
• Social media location tags. Photos and posts frequently embed location metadata or check-ins that others can piece together without any technical tracking at all.
• Shared calendar or itinerary apps that sync location or travel plans to more people than you remember granting access to.
• An AirTag or Bluetooth tracker hidden on your person, in a bag, or in a vehicle — both iOS and Android now alert users to unknown trackers travelling with them, though not always immediately.

How to check for deliberate tracking

1. iPhone: Settings → Privacy & Security → Location Services → review every app's access. Also check Settings → General → VPN & Device Management for unauthorised profiles, and Find My → Me for who you're sharing location with.
2. Android: Settings → Location → App permissions, and Settings → Google → Manage your Google Account → People & sharing for active location shares.
3. Both platforms now surface unknown-tracker alerts (AirTag/Find My Device network) — don't dismiss one if it appears, even once.
4. Check your car, particularly if it's shared, leased or was recently serviced — GPS trackers are inexpensive and simple to place.
5. If nothing above explains it and the pattern is specific and repeated, treat it as a credible tracking concern rather than coincidence.

A note on children's and teenagers' devices

Location-sharing conversations in a household usually focus on the adults, but children's and teenagers' phones are frequently more exposed — more apps installed with less scrutiny, more location permissions granted casually to games and social apps, and less awareness of what's actually being shared and with whom. If tracking concerns exist anywhere in the household, it's worth extending the same review to every family member's device, not just the principal's, since an oversharing teenager's account can sometimes reveal a parent's location indirectly through shared family features.

What to do once tracking is confirmed

Revoke every location share you don't recognise or no longer want active. Remove any unauthorised device-management profile. If a physical tracker is found, photograph it before removing it — useful if the situation involves a legal dispute. Move sensitive planning and conversations to a separate, trusted device until the picture is fully clear. And treat this as connected to your broader account security, not an isolated phone issue — the same monitoring discipline that flags a stolen credential before it's used, described in dark web monitoring for UHNW families, is relevant here, since location data itself is a commodity traded alongside credentials on the same underground markets.

Most location leaks are permission, not intrusion. But permission you don't remember giving is worth revoking regardless of intent.

If the concern extends beyond location to messages, calls or camera and microphone access, the checklist differs and deserves its own process — see our companion piece on what to do if someone is spying on your phone. For principals with a genuine, specific threat — a dispute, a public profile, a security incident — DIY checks are a reasonable first pass but not a substitute for a forensic review capable of detecting the kind of tracking built specifically to evade one.

Travel changes the picture considerably

Principals who travel frequently — for business, between properties, on chartered aircraft or vessels — face tracking risks that a static-address checklist doesn't fully cover. Checked luggage, vehicles provided by a host or venue, and gifted items are all plausible vectors for a physically placed tracker, and hotel or rental-property WiFi networks can, in some cases, be used to infer presence and movement patterns even without a tracker at all. Before travel involving any heightened sensitivity — a contentious negotiation, a public appearance, a jurisdiction with elevated risk — a physical sweep of luggage and vehicles, alongside the digital checks above, is a reasonable precaution rather than an overreaction.

It's also worth remembering that location data itself has commercial value independent of any specific adversary. Data brokers aggregate and resell movement patterns derived from apps with location permissions, which is a privacy problem distinct from targeted tracking but worth addressing with the same permission audit — fewer apps with location access, reviewed regularly, reduces this exposure regardless of whether anyone specific is watching.

A standing protocol beats a one-time check

A single sweep answers the question for today. A recurring review — before significant travel, after any change in household staff, following any dispute or security concern — answers it continuously, which is the difference that matters for anyone whose situation could plausibly change.

Obsidian Helm conducts discreet device and location-exposure reviews for principals and family members, and builds the standing protocol that prevents a repeat, within our Personal Cybersecurity practice — remote, confidential, and answered by one named contact.

Frequently asked