How to Detect and Remove Hoverwatch from a Phone
Hoverwatch can be detected on Android through Device Administrator settings, battery usage data, and network activity patterns — and removed either through the app’s settings, manually, or via factory reset. This guide walks through every detection and removal method so you can verify whether Hoverwatch is on your device and eliminate it completely.
What Hoverwatch Does on Your Device
Hoverwatch is an Android monitoring app developed by REFOG that records SMS, calls, keystrokes, GPS location, WhatsApp messages, and screenshots — all sent silently to an external dashboard.
Hoverwatch is sold as a parental control and employee monitoring tool. Once installed, it hides its icon from the app drawer, registers as a Device Administrator, and runs as a background service. All captured data is encrypted and uploaded to hoverwatch.com where whoever installed it can view it through their account dashboard.
The features it runs actively include: keystroke logging (every character typed in any app), screenshot capture on every screen unlock, GPS location updates at regular intervals, call logs with duration and contact names, SMS content, and WhatsApp/Facebook Messenger message capture.
Hoverwatch requires Device Administrator privileges to persist on Android — without this permission, Android would allow users to uninstall it like any normal app. This is why checking Device Admin Apps is the most reliable detection method.
How to Detect Hoverwatch on Your Android Phone
The three most reliable detection methods are checking Device Administrator settings, reviewing battery usage, and inspecting active background services.
Check Device Administrator Apps
Settings > Security > Device Admin Apps (may be under 'Device Administrators' depending on Android version). Hoverwatch registers here. Any app you don't recognize with admin privileges is suspicious.
Check Battery Usage
Settings > Battery > Battery Usage > All Apps (last 7 days). Sort by consumption. An unfamiliar app consuming 5–15% of battery in the background is a strong indicator of monitoring software.
Check Data Usage
Settings > Network > Data Usage > Wi-Fi Usage. Enable 'Show system processes.' Hoverwatch uploads logs regularly — look for unknown apps with consistent outbound data usage.
Check Installed Apps with System
Settings > Apps > See All Apps > enable 'Show system processes.' Sort by install date. Hoverwatch may appear under a disguised name — look for apps installed on a date when someone else had your phone.
Run Malwarebytes Scan
Download Malwarebytes from Google Play. Run a full scan. Malwarebytes flags Hoverwatch and similar monitoring apps as 'Potentially Unwanted Programs' (PUP) and identifies their exact location.
Hoverwatch in Device Admin settings often appears as “Hoverwatch” or under the REFOG developer name. On some older installations it may show as a generic service name — the key is any admin app you didn’t authorize yourself.
Battery usage comparison: a standard day without monitoring software shows no significant background drain from unknown apps. Hoverwatch’s keylogger and upload functions typically appear as 5–15% battery usage attributed to a background process.
The Device Admin check is the single fastest way to detect Hoverwatch. It’s a hard requirement for the app to function — it cannot persist without Device Admin privileges, and Android exposes the full list of apps with those privileges in Settings. A 30-second check tells you definitively whether it’s there.
# Connect phone via USB, enable USB debugging, then run:
adb shell pm list packages -i | grep -i hoverwatch
package:com.refog.mobilespy installer=null
# Also check for REFOG-related packages:
adb shell pm list packages -i | grep -i refog
package:com.refog.mobilespy installer=null
# “installer=null” means it was sideloaded (not from Play Store)
# All legitimate spy apps are sideloaded APKs
How to Remove Hoverwatch — Three Methods
Removal requires revoking Device Admin permission first — attempting to uninstall without this step fails. After revoking admin rights, the app can be uninstalled normally.
Method 1 — Standard manual removal:
Step 1: Settings > Security > Device Admin Apps. Find Hoverwatch (or REFOG). Tap it and select “Deactivate.” This removes the protection that prevents uninstall.
Step 2: Settings > Apps > find Hoverwatch or com.refog.mobilespy. Tap Uninstall. It will now uninstall normally. Confirm when prompted.
Method 2 — Malwarebytes removal:
Install Malwarebytes from Google Play, run a full device scan, and select “Remove Selected” when Hoverwatch is flagged. Malwarebytes handles the admin revocation step automatically.
Method 3 — Factory reset:
Settings > General Management > Reset > Factory Data Reset. This removes all data and apps including Hoverwatch. Back up personal files (photos, contacts) to Google Drive or a computer before resetting — but do NOT back up apps, as the backup would include Hoverwatch.
Before backing up anything prior to a factory reset, verify your backup doesn’t include the monitoring app. Back up photos and contacts only — not apps or system data. A full backup may restore Hoverwatch alongside your other data.
After removing any spy app, treat your passwords as fully compromised. Every password you typed on that device is potentially in someone else’s hands. Change passwords starting with your email — because email resets everything else. Do it from a laptop or tablet that you know is clean, not from the just-cleaned phone.
Pros
- Standard removal via Device Admins is fast and clean
- Malwarebytes automates the process for less technical users
- Factory reset is guaranteed — no remnants possible
- Remote suspension available from hoverwatch.com if you're the installer
Cons
- Must revoke Device Admin before standard uninstall
- Factory reset deletes all local data
- App may reinstall if someone has physical access to phone again
- Some data may have already been uploaded before removal
Are you checking this because you suspect Hoverwatch is on your device right now?
Click to vote — results are anonymous
Once Hoverwatch is removed, change all passwords, enable two-factor authentication on every important account, and consider updating your Android PIN or password. If you believe someone installed monitoring software without your knowledge, this may constitute a legal violation in your jurisdiction — document what you found before removing it if you intend to take any legal action.
This article is for informational purposes. If you believe you are being monitored without consent, contact local law enforcement or a digital rights organization for guidance.
Can Hoverwatch be installed without me knowing?
Does Hoverwatch work if my phone has no SIM card?
If I change my phone PIN, does that stop Hoverwatch?
Can Hoverwatch be reinstalled remotely after I remove it?
Will removing Hoverwatch alert the person who installed it?
Privacy advocate and tech journalist. Makes complex security topics simple for everyday users.
