Do you suspect that someone was using your smartphone in your absence? Or want to check your childโs activity on his first phone? You might just be curious about which apps were hogging your bandwidth overnight. In any case, Android stores a lot of data about user actions you just need to know where to look.
In this article we will look at legal ways to view activity history without jailbreaking the device. You will learn how to check, track, restore, and even detect through system logs. Important: all methods work on devices with call and message log, track using applications, restore deleted files and even discover hidden actions through system logs. Important: all methods work on devices with Android 10โ14 (on older versions, some functions may be missing).
We warn you in advance: some methods require administrator rights or unlocking the bootloaderwhich may lead to loss of warranty. Analyze the data only on your device or with the written consent of the owner - otherwise it violates Article 138 of the Criminal Code of the Russian Federation ("Violation of secrecy correspondence").
1. Call and SMS log: where the full history is stored
The most obvious way to track activity is to check standard logs. Even if calls or messages have been deleted, they can often be restored.
On most smartphones (Samsung, Xiaomi, Google Pixel), call history is stored in the application Phone. Open it and go to the Logtab. The following are displayed here:
- ๐ Incoming, outgoing and missed calls (with date/time)
- โฑ๏ธ Duration of calls
- ๐ Contacts or numbers (even hidden)
For SMS/MMS use the standard application Messages. On Android 12+ Google automatically archives messages older than 30 days - they can be found in the Archivesection. On Samsung there is a separate folder Spam and blockingwhere "suspicious" SMS can be stored.
If log is empty, but you are sure that there were calls - check the synchronization settings in Settings โ Google Accounts โ Contacts synchronization. Sometimes the history is erased when synchronization fails.
โ ๏ธ Attention: Cache clearing applications (for example CCleaner or Files by Google) often delete call logs during "deep cleaning". Before using such utilities, make a backup copy via Settings โ System โ Backup.
2. Application history: which apps were launched and when
Android keeps detailed records of application usage. To see this information:
- Open
Settings โ Applications - Tap on
โฎ (three dots) โ Special access โ Using applications - Select period:
Today,Yesterday,Last 7 daysorCustom range
Here you will see:
- ๐ฑ List of all installed applications
- โณ Time of active use (in hours/minutes)
- ๐ Number of starts
- ๐ Last time the application was opened
On Xiaomi and Huawei there is an additional section Security โ Activity Monitorwhere they show nightly application launches (useful for detecting background processes).
| Manufacturer | Path to application history | Additional data |
|---|---|---|
| Google Pixel | Settings โ Applications โ Usage time |
Notifications, permissions |
| Samsung | Settings โ Device care โ Usage analysis |
Energy consumption by application |
| Xiaomi/Redmi | Settings โ Applications โ Usage statistics |
Starts in the background |
| Huawei/Honor | Settings โ Battery โ Using applications |
Background operating time |
โ ๏ธ Attention: Some applications (for example, Telegram or Signal) can disguise their activity as system processes. If you see a suspicious name like com.android.system with a high usage time, this is a reason to check your phone for viruses.
3. Geolocation and movements: how to find out where the phone was
If your device is enabled geolocation, you can track your movements through:
Method 1. Google Maps (Chronology)
- ๐ Open Google Maps Timeline (requires logging into the same account as on your phone)
- ๐ Select a date - the system will show routes, stops and even travel method (on foot, by car, public transport)
- ๐ธ If enabled, photo taken in these places will be displayed photophotos
Method 2. Phone settings
Go to Settings โ Google โ Google account management โ Data and personalization โ Location history. Here you can:
- ๐ View visited places for any period
- ๐ Export data to
KML-file for analysis on PC - ๐ซ Disable history recording (if not needed)
How to deceive geolocation?
Some applications (for example, Fake GPS Location) allow you to replace coordinates, but this requires enable Developer mode and allow Mock Locations. You can detect a substitution by a discrepancy in the speed of movement (for example, โmovingโ at a speed of 500 km/h).
On Samsung there is an additional function Find My Mobile (find in Settings โ Biometrics and security), which shows current location devices and movement history for the last 24 hours.
4. Hidden logs and system files: advanced analysis
For experienced users: Android stores detailed logs of system events in a folder /data/log/, but requires access to it root access. Without them, you can view only part of the data:
Call and SMS log (a file manager with access to system folders is required, for example, FX File Explorer):
/data/data/com.android.providers.telephony/databases/mmssms.db
/data/data/com.android.providers.contacts/databases/contacts2.db
Application installation/uninstallation log:
/data/system/packages.list
/data/system/packages.xml
To read these files:
- Install SQLite Browser on PC
- Connect your phone in mode
File transfer (MTP) - Copy the databases to your computer
- Open in SQLite Browser and study the tables
sms,calls,packages
Deleted SMS with a tag deleted=1
Calls with status OUTGOING or INCOMING
Unknown packages in packages.xml
Suspicious timestamps (for example, activity at 3 am)-->
โ ๏ธ Warning: Changing or deleting files in/data/without root access may cause to data loss or cyclic reboot devices. We recommend that you first create a full backup viaadb backup.
5. Recovering deleted data: photos, messages, files
If the history has been cleared, try to recover deleted data using specialized tools. The effectiveness depends on how much time has passed since the deletion and how actively the phone's memory has been used.
Method 1. apps for PC
- ๐ฅ๏ธ Dr.Fone (recovers SMS, photos, contacts)
- ๐ฅ๏ธ EaseUS MobiSaver (supports WhatsApp, Viber)
- ๐ฅ๏ธ DiskDigger (free version for photo/video)
Method 2. Cloud backups
Check:
- ๐ฅ๏ธ
Google Drive โ Backups(automatic Android backup) - ๐ฅ๏ธ
Google Photos โ Recycle Bin(photos are stored for 60 days after deletion) - ๐ฅ๏ธ
Samsung Cloud(for devices Samsung)
On Xiaomi there is a hidden recovery function: go to Settings โ About phone, tap 5 times on MIUI Version, then enter the password ##3646633## (Engineer Mode) and select Backup/Restore.
The chances of recovery are maximum in the first 24 hours after deletion. Each new recorded file (photo, video, application update) reduces the probability of successful recovery by 15-20%.
6. Real-time monitoring: how to track activity remotely
If you need it remote control device (for example, a childโs phone or a corporate smartphone), use legal tools:
For parental control:
- ๐ถ Google Family Link (time limit, application blocking)
- ๐ถ Kaspersky Safe Kids (location monitoring and web activity)
- ๐ถ Norton Family (search query log)
For corporate devices:
- ๐ผ Microsoft Intune (security policy management)
- ๐ผ VMware Workspace ONE (software installation control)
- ๐ผ Samsung Knox (for devices Samsung)
Important: Installation spyware (for example, mSpy, FlexiSPY) without the consent of the phone owner is punishable under Article 138.1 of the Criminal Code of the Russian Federation (โIllegal trafficking in special technical funds").
โ ๏ธ Attention: Some applications for remote control (for example, Cerberus) may be blocked by antiviruses as โpotentially dangerousโ. Before installation, add them to exceptions in the settings Google Play Protect.
7. How to protect your phone from unauthorized access
If you want prevent unauthorized access to activity history:
Basic measures:
- ๐ Install PIN code or pattern key (at least 6 dots)
- ๐ Enable biometric authentication (fingerprint/face recognition)
- ๐ Set up automatic blocking after 30 seconds of inactivity
Advanced protection:
- ๐ก๏ธ Enable device encryption (
Settings โ Security โ Encryption) - ๐ซ Prevent installation of applications from unknown sources
- ๐ Regularly check application permissions application permissions
Settings โ Applications โ Permissions - ๐ฑ Use guest mode (
Settings โ System โ Users) for temporary access
On Android 12+ a function has appeared Private Compute Service (Private Compute Core), which processes sensitive data (for example, speech recognition) locallywithout sending it to Google servers. Enabled in Settings โ Google โ Account management โ Data and personalization.
Create a โtrapโ for strangers: install a decoy application (for example, Fake Calculator), which will take a photo of someone who is trying to unlock the phone and send the photo to your email.
FAQ: Frequently asked questions about tracking activity on Android
Is it possible to find out which sites you visited through your phone?
Yes, if used Google Chrome:
- Open the browser and tap
โฎ โ History - For remote viewing, go on myactivity.google.com (account login required)
On Samsung Internet history is stored in Settings โ Personal data โ Browser history.
How to check if my phone has been connected via Bluetooth or Wi-Fi?
Go to:
Settings โ Connections โ Bluetooth โ Connection historySettings โ Network and Internet โ Wi-Fi โ Saved networks
On Android 11+ you can see last connection time to each network.
Is it possible to track activity in instant messengers (WhatsApp, Telegram)?
Standard means - no. But:
- In WhatsApp there is a function
Export chat(saves history in.txt) - In Telegram can be enabled
Login history(Settings โ Privacy โ Active sessions) - For corporate control, use Telegram Business with audit settings
How can I tell if spyware has been installed on my phone?
Signs of spyware:
- ๐ Rapid battery drain (even in standby mode)
- ๐ถ Increased mobile data traffic
- ๐ฑ Heating of the phone for no apparent reason
- ๐ Extraneous sounds during calls
Check the phone using Malwarebytes or Kaspersky Mobile Antivirus.
Is it possible to track activity on the phone without physical access to him?
Yes, but for this you need:
- Know Google account datalinked to the phone
- Have access to phone number (for SMS commands)
- Use functions like Find My Device or Samsung Find My Mobile
Without this data, remote monitoring is only possible through pre-installed software (for example, data-i="321">or Cerberus or Prey Anti Theft).