YOUR PARENTAL CONTROL APP IS SPYING ON YOUR KIDS

October 25, 2025
shad Khattab

These Apps Don’t Just Monitor — They Spy and Sell


      Picture this: your child’s phone is locked down. Content filters on. Location tracking on. Parental control app proudly installed. You finally exhale — you’ve done the responsible thing.


      But there’s a problem almost no one talks about.

      The app guarding your child’s screen may also be quietly collecting, storing, and sharing their data — turning your child’s “safety” tool into another source of surveillance and profit.  This isn’t a scare story. It’s how many of these apps are actually built to work.
     


      Parental control apps are marketed as digital guardians. Offering parents peace of mind by protecting kids from online dangers and influences. But under the hood, many of these tools act more like spyware — harvesting extremely sensitive information and quietly feeding it into the machinery of the surveillance economy.


        Many user agreements openly admit that they sell your personal information. Others insist they don’t — until investigations later reveal that they’ve been quietly selling millions of records all along. source


What They Track.


Most parental monitoring apps go far beyond basic screen time limits and monitoring features. Here’s a sample of what many of them quietly collect:


  • Real-time GPS location (updated as frequently as every few seconds)
  • Complete SMS and app message logs (including deleted messages)
  • Call history and contact lists Web history and search queries
  • Photos and videos stored on the device
  • Social media activity, including screenshots of Instagram, Snapchat, TikTok, and other apps
  • Microphone and camera access, in some cases (under the guise of "emergency tools") This is the kind of invasive data extraction that would be illegal without consent — but because it's done under the pretense of “parental control,” it's given a free pass. (Abdullah and Baidilah 2022).i


 

Where the Data Goes.


     Here's where things get darker. Many of these apps don’t just collect the data and keep it between parent and child. They store it on corporate servers — and that data becomes a monetizable asset.


     Many parents who aren’t tech savvy and even those that are will forget, non know, or downplay that the information gleamed from their children’s devices isnt directly linked to their (parents) phone. The information is first sent and saved onto a server, maybe in Minneapolis maybe in Belarus. The point and the worry is, computer security and personal security and your children's safety is in proportion to the competency and moral character of those handling the devices and software that collect all your family’s data to not to sell it or even worse use it against you.


The scary shit.


     A 2021 report by The Markup found that Life360, one of the most popular family tracking apps, was selling precise location data to dozens of data brokers. These brokers then resell it to advertisers, insurance companies, and even law enforcement. This isn't a bug — it's part of the business model. In fact, Life360 was described by one data broker as "one of the most valuable sources of data”(Keegan and Ng 2021).ii


 

    Another app, Bark, has been praised for its AI-based alerts about bullying or self-harm. But even Bark’s privacy policy acknowledges it may “share personal information with third-party service providers and business partners.”

And then there’s mSpy, a widely used app that’s often installed without the child’s knowledge. It has a history of data breaches and has been flagged repeatedly by security experts for lax protections. One 2018 leak exposed thousands of user credentials and activity logs (Krebs 2018).iii


 

The Data Is Forever


Parents might think, “I’m just checking on my kid — no one else will see this.” But the minute that data hits a server, it’s at risk of:


  • Being resold
  • Leaked in a breach
  • Accessed by employees, contractors, stalkers, or foreign governments
  • Used to build profiles for future advertising or insurance risk scores


    Hitting delete is like shaking your phone to get your steps in for the day.  It may make you feel better, but you really didn't do anything.   The app and the company may retain the data for months or even years. And your child’s browsing history, location, messages, and photos become just another data point in the global trade of behavioral profiling.


From Home to the Panopticon


     The terrifying irony is clear. Parents install these apps to protect their children from strangers online — while the app itself acts like a stranger watching from the shadows. The home becomes a testing ground for how we normalize surveillance: not just accepting it, but paying for it, enabling it, and calling it “good parenting.”


 

End Notes and References


i   Abdullah, Muhammad Naim, and Nurhafisah Baidilah. 2022. “CCMTV: Android Parental Spying Apps Utilizing Child’s Phone Camera and Microphone.” AIP Conference Proceedings 2617 (1): 040004. https://doi.org/10.1063/5.0119764

ii   Keegan, Jon, and Alfred Ng. 2021. “The Popular Family Safety App Life360 Is Selling Precise Location Data on Its Tens of Millions of Users.” The Markup, December 6, 2021. https://themarkup.org/privacy/2021/12/06/the-popular-family-safety-app-life360-is-selling-precise-location-data-on-its-tens-of-millions-of-user


iii   (Maier, Tanczer, and Klausner 2025).i

i Maier, Eva-Maria, Leonie Maria Tanczer, and Lukas Daniel Klausner. 2025. “Surveillance Disguised as Protection: A Comparative Analysis of Sideloaded and In-Store Parental Control Apps.” arXiv, April 2025. https://arxiv.org/abs/2504.16087






By shad Khattab October 18, 2025
And it's just the beginning…
By Shad Khattab October 11, 2025
I’m American-born, Egyptian-raised, and my BS detector got tuned up before I could ride a bike. Over here, we strut like we are the bastion of freedom. Over there, they call Egypt Umm el-Dunya—Mother of the World—and act like the whole planet is a spin-off. Cute stories. Both are thick-cut nonsense. That’s the gift of growing up in two proud echo chambers: you learn to hear the bullshit in stereo. So of course when I look at the modern corporation—the world’s most dysfunctional anti-community club—I recognize the same hustle: take raw extraction, dress it up in soft-focus language, and sell it back as “innovation” and “connection.” Step two in deconstructing your life away from Big Tech is simple: learn the lingo. Clock the newspeak. It's a "smart" , "personalized" , "forced consensual" , "data improvement" train wreck of an internet world that the titans of tech have created. Great for them and the bottom feeders who work in the data extraction sector. The marketers, PR fools, ad Exes, account executives, and Interns. These people have taken the beautiful thing called the internet and destroyed it like they did with printed words, radio, and Tv. All in the name of more money and more government control. In order to push this form of the internet on us. The corrupt form that serves the elites its minions and its government puppets create a vernacular that hides their true intentions. In order to deconstruct from this system is to understand and be able to decode the bullshit that spews in the name of our benefit. I wish i could say this list is exhaustive but bullshit is like glitter. easy to make . impossible to clean up The “Smart” Taxonomy Smart TV → ad terminal with a screen; ACR (Automatic Content Recognition) watches what you watch . Smart Speaker → an always-listening coupon dispenser with jokes. Smart Home / Hub → one app to track every room (and you) Smart Meter → fine-grained energy diary for your life patterns. Smart Doorbell / Cam → neighborhood watch, but for data brokers. Smart Car → rolling telemetry farm; your commute is content. Smart Fridge / Oven / Washer → firmware updates for boiling water. Smart Bed → intimate-moment analytics, now in graph form. Smart City → surveillance, but with street art. Smart Tags / Beacons → “lost & found” meets proximity tracking. Auto-translate: “smart” = has a mic/cam/modem/telemetry stack and a Terms of Service. Performance & "Personalization" gloss “Make the app run better” → turn on surveillance so we can A/B test you like a lab rat. “Improve your experience” → we’ll log everything you do, and save it forever. “Diagnostics & crash analytics” → because our product will eventually break, we will use this as an excuse to harvest your data. Telemetry plus bonus tracking. “Quality improvement data” → we need your data to justify next quarter’s roadmap. “Better recommendations” → profiling so precise it creeps out your therapist. “Tailored / relevant ads” → stalking, but with videos, graphic design and drama. “Interest-based advertising” → we built a dossier on you, your spouse, friends, children, neighbors; now we’ll rent it out. “Measurement partners” → adtech middlemen you’ve never heard of. “Cross-device linking” → your phone, laptop, TV, car = one person: you. Thank from of all of us at Big Tech “Optimize our services” → we’re training models on your behavior. “Experimentation” / “A/B testing” → dark-pattern lab work in production. “Preload / background activity” → runs when you’re not looking; talks to HQ. “High-precision location” → we want your front door, not your neighborhood. “Bluetooth/Wi-Fi scanning” → we can track you even with GPS “off.” “Contact discovery / address-book matching” → upload everyone you know, thanks. “People You May Know” → shadow-profile bingo using your contacts + metadata. Consent theater & privacy kabuki “We’ve updated our Privacy Policy” → we expanded data use; enjoy the novella. “Manage your privacy” → 7 screens and 42 toggles (default: ON). “Legitimate interests” (GDPR) → we decided we don’t need your consent. “Consent Management Platform (CMP)” → cookie banner obstacle course. “Partners / vendors list” → 300 companies you’ll never meaningfully audit. “Do Not Sell/Share” → sure, but we’ll “process” it instead. “Essential cookies” → analytics and ads wearing a mustache disguise. “Single Sign-On for security” → one login to track them all. “Data portability” → here’s a ZIP of gobbledygook; good luck. “Transparency report” → glossy PDF with no useful detail. “Privacy nutrition label” → marketing garnish; ingredients still secret. “End-to-end encrypted”* → * except backups, metadata, and “abuse review.” “On-device processing” → plus quiet uploads when we feel like it. “Differential privacy” → math words to make you stop asking questions . Safety-Washing & Well-Being “Trust & Safety” → under-funded moderation and PR fire drills. “Community standards” → rules (and exceptions) we enforce arbitrarily. “Brand safety” → we’ll protect advertisers; users, maybe later. “Digital well-being” / “Take a break” → timers that don’t dent revenue. “Pause history” → temporary amnesia; we still remember enough. “Family pairing / age assurance” → surveillance for kids with extra step s. Monetization, adtech, & data alchemy When they cant come up with a product that brings value and sustainability to the person, groups and society as a whole, they revert to data extraction. “Service providers” → third parties that look a lot like data brokers. “Attribution / conversion tracking” → follow you from ad to checkout to couch. “Frequency capping” → we track every ad you’ve seen to show you more. “Audience insights” → we sliced your life into sellable segments. “Custom / lookalike audiences” → target you and your statistical twins. “Data clean room” → surveillance, but in a white lab coat. “Lift study / incrementally” → we’ll take credit for sales you were making anyway. “Native / branded content” → ads pretending to be journalism. “Creator fund / boost / promote” → pay to be visible on a platform you built. Dark patterns & growth-hacking In a valiant attempt to make everything seem harmless, they pick and choose words that sound like they are doing us "naive" consumers a favor. Data extraction has many whimsical words that sound vaniila . “Streamlined onboarding” → we hid the opt-outs. “Nudges / gentle reminders” → psychological tricks to increase tracking. “Gamification / streaks” → variable rewards to keep you hooked. “Infinite scroll / autoplay” → extraction treadmill. “Re-engagement” → nagging disguised as notifications. “High-priority alerts” → marketing pings skipping your Do Not Disturb. “Device fingerprinting / probabilistic matching” → tracking without cookies. “Identity graph / MAID” → permanent ad ID with a cute acronym. “Shadow profiles” → dossiers on non-users built from your friends’ uploads. “Privacy by design” → slide in the deck; not in the backlog. AI-speak that means “we need more data “Responsible AI / Ethical AI” → please don’t regulate us yet “Safety filters / guardrails” → vibes checks, not guarantees. “Human-in-the-loop” → underpaid contractors looking at your stuff. “Model improvement” → let us train on your content. “Hallucination reduction” → still wrong, just confidently. “Data governance” → the binder we wave at audit ors. Legalese & retention gotchas “As required by law” → we’ll hand it over and can’t tell you. “For research purposes” → broad license to experiment on your data. “Aggregated / de-identified / pseudonymous” → can be re-identified with effort. “Retention policy” → we keep it until the heat death of the universe. “Delete account” → deactivate now; actually delete… eventually… maybe. “Exceptional / lawful access” → backdoor with extra paperwork. “Data residency” → stored locally, accessed globally. “Standard contractual clauses” → trust us, the paperwork is airtight. “Legitimate business purposes” → universal permission slip. Platform & ecosystem glue words “ Seamless ecosystem” → lock-in that feels silky. “Interoperability” → works great with our stuff. “Trusted partners” → companies that pay or get paid. “Security updates” → telemetry piggybacking on patches. “Beta / early access” → free QA labor + extra tracking. “Improve discoverability” → we’ll decide who gets seen How to auto-translate in your head “Personalize” → profile. “Measure” → track. “Partner” → third-party data vacuum. “Research” → internal product/ads R&D. “Safety” → PR shield. “Choice” → maze. “Temporary” → until we quietly turn it back on. So here’s where you come in. You don’t beat these people by memorizing their slogans; you beat them by refusing to speak their language. Every time a platform whispers “frictionless,” you ask, “for whom?” Every time a dashboard purrs “personalized experience,” you ask, “at whose expense?” That list of terms you just read is not trivia; it’s a field manual. It’s how you stop mistaking a chokehold for a hug. Read it, share it, argue with it—but most of all, use it. Start calling things by their real names. Opt out when you can. Jam the system when you must. Because the minute enough of us stop repeating their BS (bullshit) back to them like a prayer, the spell breaks—and the “inevitable” future they keep selling suddenly has to answer to something they never planned for: a public that can finally see through the fog and say, with a straight face, “Nah. Not in our name. Not with our data. Not anymore.”
By Shad Khattab September 20, 2025
“If it’s free, you’re not the customer—you’re the side hustle.”
By Shad Khattab September 15, 2025
Zuboff brings the savage receipts
By Shad Khattab September 6, 2025
Re identification is not a parlor trick its an industry
By shad Khattab July 28, 2025
Microsoft- Making shitty products since 1977
By Shad Khattab July 26, 2025
It's time to leave the surveillence complex
By Shad Khattab July 24, 2025
Your Router: The Snitch at the Center of Your House
By shad Khattab July 23, 2025
For many parents in America and globally sharing their children’s milestones, funny moments became part of life. Until......