Phone Audit

Check your phone. Understand the findings. Choose your next step with Phone Audit by Samos.

Start on Home, read what needs review and choose a fix. All tools are free. Sign in with an email address you verify once.

REVIEW YOUR DEVICE
Review Android's security update, screen lock, encryption and debugging settings. Read each finding and open Android settings yourself. Save snapshots to compare changes. Optional Daily watch alerts and a home-screen widget help you revisit findings.

UNDERSTAND YOUR APPS
Review camera, microphone, location, contacts and other app access. Powerful access, including accessibility, notification reading, device admin and keyboard input, is grouped together. Spying check reviews combinations of access and other signals; it cannot prove spying. Inspect signing certificates and services, or open Android settings. A permission grant is not evidence of malware.

CHECK LINKS AND FILES
Inspect a link locally, including links shared from another app, without following redirects. Calculate a file's SHA-256 and compare it with a trusted publisher's fingerprint. Hashing does not run or upload the file.

SCAN FOR KNOWN MALWARE
Compare apps and selected files with 12,240 known-malware fingerprints, offline. A match needs investigating; no match never means the phone is clean. Scan limits and incomplete coverage are explained.

ASK AI
Open Ask AI from Tools for built-in guides and an optional downloadable on-device model. Questions and inference stay on the phone. AI may be wrong, incomplete or too slow; timed-out answers are discarded. It never changes findings or settings. A voluntary report form shows exactly what will be sent to Samos before you consent.

BLOCK APPS FROM THE INTERNET
Choose apps whose internet access you want to pause. Phone Audit uses Android VpnService to receive their IPv4 and IPv6 packets, including DNS, process them briefly in memory, and discard them on this phone. Packet contents and destinations are not logged, saved, shared or uploaded. There is no remote VPN server or traffic forwarding, and no redirection for advertising. Apps sharing a selected app's Android user ID are blocked together; other user IDs keep normal routing. Starting replaces another VPN. Read the separate disclosure and agree before allowing Android's VPN request. Cancel leaves blocking off. Stop in the app or notification ends blocking, as does service termination. Always-on blocking and per-website rules are not offered.

PRIVATE VAULT
Keep encrypted copies of files that only this phone can open. Keep your originals: there is no cloud backup, separate vault lock or key recovery. Exporting creates a plaintext copy at your chosen location.

YOUR ACCOUNT
Firebase handles registration, email verification, sign-in, password reset and account deletion. Your account stores your email, account/session identifiers and a terms-agreement record. Account operations and voluntary AI reports use internet. Audit results, app lists, files and ordinary AI questions stay on your phone.

Phone Audit is a toolkit, not a complete antivirus or a guarantee against attacks. Android limits what it can observe; some checks are unknown. The advisory library is small and historical, not a current vulnerability feed. No exploit or automatic repair is run.

Labelled, non-personalized Google AdMob banners may appear on Home and Learn after privacy checks. Manage ad privacy choices where required. Google processes ad-related identifiers, IP-derived approximate location, interactions and diagnostics. Security data is not supplied for ad targeting. All tools are free; no purchases or subscriptions.

Support: [email protected]