MobileHub: Anti Spy Scanner

Most security apps find viruses. MobileHub is built for a different problem: the app that someone with physical access to your phone installed deliberately, and then hid. Stalkerware is usually installed by a partner, an ex, or a parent. It does not arrive from a download you regret — it is put there on purpose by someone who knew your passcode. MobileHub is built to find that, and to tell you what to do next without putting you at risk. ▍ FIVE-LAYER SPY DETECTION One suspicious permission means nothing. Half the apps on any phone can use the microphone. So MobileHub assesses five independent signals and weighs them together: • Known indicators — application IDs and hosts from the open stalkerware- indicators project • Surveillance reach — what the permissions actually add up to: listen, watch, locate, read messages • Concealment — no launcher icon, a disguised label, uninstall blocked • Privileged access — accessibility service, notification listener, device admin • Provenance — sideloaded, boot receiver, battery exemption, old target SDK Then it damps the result. A messaging app has enormous reach and hides nothing, so reach on its own is discounted. A screen reader legitimately holds an accessibility service, so known assistive apps are capped and explained rather than accused. An app that calls TalkBack spyware has taught you to ignore it. ▍ SAFETY BEFORE REMOVAL Uninstalling stalkerware can alert whoever installed it. For someone in an abusive situation that is a physical safety event, not an inconvenience. So the safety note sits above the removal button, not below it: photograph the evidence first, consider contacting an advocate, and understand that removal may notify the installer. The removal steps put device-admin revocation first, because otherwise the uninstall silently fails. ▍ MALWARE SCANNER A staged scan, so it is fast on a phone with hundreds of apps: • Local signatures, indicator list and on-device heuristics — no network • Cached verdicts, 7-day TTL • SHA-256 of the APK — only for apps a cheap check already flagged • MalwareBazaar, VirusTotal and MalShare reputation lookups No sign-up, no account, no API key to enter. Install it and it works. Only a hash ever leaves your device. Never the app itself, never your installed-app list. And the scan does not overstate what it found. One engine out of seventy is noise, not a verdict. The detail sheet shows every source consulted — including the ones that were not, and why. A source that ran out of quota is shown as NOT CHECKED, never quietly counted as clean. ▍ ENCRYPTED VAULT AES-256-GCM, with the key generated in your device's hardware-backed Keystore and released only after a biometric or screen-lock check. Two things worth knowing up front, both of which the app tells you before you encrypt anything: • Export ships in version one. One tap writes every item back out, decrypted. Encrypted data you cannot get back out is not a feature. • The key belongs to this app. Uninstalling MobileHub makes vault files permanently unreadable. Export first. ▍ APP LOCK Lock any app behind a PIN or your fingerprint. App Lock does not use an accessibility service. It polls usage events instead. That is harder and slightly less reliable — but this app treats an accessibility service as the strongest monitoring signal there is, and it will not request one for itself while flagging it in others. Optional intruder photo after four failed attempts, announced on the lock screen before it can ever fire. ▍ DEVICE HEALTH SCORE Every deduction names one specific, fixable thing and links to the setting that fixes it. No vague "optimisation" points. Malware found caps the score, because a weighted average that lets an infected phone score in the seventies is a number that misleads.