Someone Might Be Watching Your Phone Screen—Here’s What You Need to Do Immediately

So you just saw a pop-up or got a strange notification saying someone has access to your screen. Your heart sinks. You didn’t knowingly give anyone access. But maybe you installed something recently, something called Empty Folder Cleaner or something like it?

You’re not alone. A recent viral post in revealed a surprisingly common issue: sketchy cleaner apps that look innocent but secretly gain access to your device’s screen, notifications, or even text messages. This isn’t just mildly infuriating, it’s potentially catastrophic for your privacy.

Let’s break down what this means, what not to do, and how to get your digital life back on lockdown.

“Empty Folder Remover” Isn’t Just Cleaning Folders

Apps like Empty Folder Cleaner often pose as storage savers or performance boosters. They might promise to:

• Speed up your phone
• Delete unused junk
• Remove empty folders
• Cool down your CPU (what even?)

But behind the scenes, many of these apps request dangerous permissions:

• Accessibility access, which can let them read text on your screen
• Notification access, which means they might see OTPs and private alerts
• Overlay permission, which can draw over apps (and phish you)
• Read SMS, which is a disaster for two-factor authentication

Even worse, they sometimes get installed through unofficial APKs, meaning they don’t even go through Google Play’s (albeit flawed) vetting process.

The Tell-Tale Signs You’ve Been Compromised

Here’s what to look for if you suspect your phone’s been hijacked:

• You notice pop-ups or overlays that you didn’t trigger
• Your phone screen behaves erratically, taps, scrolls, or selections happen on their own
• Apps you didn’t install suddenly appear
• Notifications disappear before you can read them
• You see strange network activity or receive login alerts from unfamiliar locations

And yes, sometimes even your banking or password manager apps get mysteriously accessed or manipulated.

First Steps: Don’t Panic, But Act Fast

If this happened to you, take a breath. Then follow these steps:

1. Immediately uninstall the suspicious app.
   • Go to Settings > Apps > [App Name] and hit Uninstall
   • If it won’t uninstall normally, boot into safe mode first
2. Change all your passwords, but do it from another device.
   • This is critical. If your phone is compromised, any password you type on it may be visible to the attacker.
   • Use a laptop or another phone to access:
     • Google account
     • Banking apps
     • Email
     • Social media
     • Anything else sensitive
3. Enable 2FA if you haven’t already, preferably with an authenticator app, not SMS.
4. Factory reset your phone.
   • Backup your important files first (photos, videos, documents, not apps)
   • Then do a full wipe to remove anything lingering in system storage
5. Notify your bank if you had cards linked to mobile pay or saved in Chrome.
6. Reinstall only verified apps, directly from the Play Store, and check the developer!
7. Review all permissions under Settings > Privacy > Permission Manager. Revoke anything that looks unnecessary.

Advanced: How to Be Even Safer Going Forward

If this shook you (as it should), consider adding these practices to your digital hygiene:

• Use a USB data blocker when charging in public. (Juice-jacking is real.)
• Install a reputable security suite like Bitdefender or Malwarebytes Mobile.
• Block unknown sources for app installations.
• Avoid phone “optimizer” and “cleaner” apps, Android handles this well on its own.
• Restart in Safe Mode regularly to catch rogue apps. (Each phone has a different method, Google your model.)
• Use a password manager to create and store strong, unique passwords. Don’t reuse the same 1234 combo everywhere.

Why This Happens So Often

The sad truth is, many users, especially the less tech-savvy, get fooled by apps that mimic helpful utilities. They remember using CCleaner on Windows and assume the same logic applies to Android. But today’s mobile operating systems are designed to manage resources automatically.

These “cleaners” often do something… just not what you want. Some show endless ads. Others read your messages. A few act as remote access trojans (RATs).

It’s especially dangerous for:

• Elderly users (who may not recognize suspicious behavior)
• Children (who download flashy games without understanding permissions)
• Anyone sideloading APKs without verifying them

Reddit’s Surprisingly Great Advice

The original Reddit post exploded with tips that were spot-on:

• “Change your passwords on another device” – YES. Don’t do it on the possibly compromised phone.
• “Nuke the phone” – Factory reset is non-negotiable.
• “Never trust cleaner apps” – Right again. They’re worse than useless.
• “Don’t give Accessibility permissions unless absolutely necessary” – Bingo.

It was a crowd-sourced lesson in practical cybersecurity, and frankly, one that should be taught more often.

Don’t Let It Happen Again

This is your wake-up call. Phones today hold everything: your bank info, your personal messages, your health data, and your identity. You wouldn’t leave your front door wide open, so don’t do it digitally either.

Double-check every permission.
Scrutinize every app.
Treat your phone like your wallet… because it pretty much is.

And if you learned anything here, maybe go tell your parents to delete that weird “Battery Saver Pro Max 2024” app.

It’s probably watching them too.