Flip the question: if you own the iPhone and you are worried someone already did this, here is the defensive checklist that actually matters. It takes about fifteen minutes and it closes the doors that intrusions use.
- Apple Account security — sign in at appleid.apple.com, change the password, and review Devices. Remove anything you do not recognize. Turn on two-factor authentication if it is off; an iPhone without 2FA is the single easiest account to take over.
- Trusted devices and numbers — in Settings > [your name] > Sign-In & Security, remove unknown trusted numbers. A trusted number is how an attacker receives your verification codes.
- Check for profiles and device management — Settings > General > VPN & Device Management. An unknown configuration profile or MDM enrollment is the classic sign of remote supervision installed by someone else.
- Screen Time — Settings > Screen Time. A Screen Time passcode you did not set, or restrictions you did not create, means someone has administrative access.
- Update and re-secure — install the current iOS release, change the device passcode, and check Settings > Privacy & Security > Safety Check, which reviews what you are sharing and with whom.
- If you suspect an active compromise — back up, erase, and restore from a backup made before the suspicion. Do not restore the same backup twice.
For a parent, the lawful version of this is Family Sharing plus Screen Time, where the child can see the supervision is on and the parent administers it openly. Ultimate Phone Spy follows the same principle on Android, Windows and Mac — visible install, documented permissions, dashboard access for the account holder (parental control features). Intrusion without consent is not a monitoring product; it is evidence in a criminal case.