The security score your kids' phones need (and what you'll actually find)

The permission creep nobody notices

You give a child an app. The app asks for location, contacts, camera. Your kid taps yes because that's what kids do. Six months later, you realise the flashlight app has access to their full contact list and location history. It's not malicious in most cases. It's just permission creep, the slow accumulation of access that nobody really consented to properly.

The thing that made me want to solve this was a message from a parent who'd checked her 15-year-old's phone using ARK. She found 47 apps with microphone permissions. Forty-seven. Some of them made sense. A lot didn't. She went through and revoked the ones that had no business listening. That single session probably improved her child's privacy posture more than any lecture about security could.

That's what the permission check in ARK does. It's free, no account needed. You scan the device and get a breakdown of which apps have what access. Then you can actually do something about it.

Breach checks aren't paranoia, they're hygiene

Last year, a school district email list leaked. Another year, a sports club database. These things happen constantly. Most parents don't check whether their children's email addresses are in those breaches. They assume 'my kid's young, what's the worst that can happen?' Plenty, actually. An email in a breach dump is currency. It gets sold, packaged, and used for credential stuffing years later.

ARK checks against the Have I Been Pwned database. If your child's email is in there, you see it immediately and you can reset the password. Shield tier adds dark-web monitoring, so you get ongoing alerts if their information surfaces in new breaches. This is the security equivalent of knowing whether they've been in an accident. It's not dramatic. It's baseline.

Why a score, not a checklist

We could have built a 40-item checklist. Those exist. What I wanted instead was something a parent could glance at and understand instantly. A 0-100 score, like a credit score, tells you something's wrong without making you read a spreadsheet. It's 73? That's good, but there's work to do. It's 41? Red flag. The score breaks down the action items by category, so you know whether the issue is permissions, network exposure, or something else.

The insight came during beta testing. A parent told me she felt 'dumb' about security until she saw her own score. Once she had a number, she understood it was actionable. She wasn't being paranoid. She was being responsible. That reframe matters more than the features sometimes.

Stalkerware is real, and it's not just in movies

I didn't expect stalkerware detection to be the most popular free feature. Then I read the support emails. People were finding it on their own devices. Children were finding it on theirs. The reality is grim. ARK detects known stalkerware and location-tracking apps, and you can run that scan without paying a penny. If something flags, you know what to do next.

That feature alone is worth the download, in my view. You run it once every few months. If nothing shows up, you've ruled out a real problem. If something does, you've caught it early.

What changes when you give someone visibility

The honest answer is: most families don't need Fortress tier, the full suite with GDPR autopilot and data-broker exposure checks. That's for people who've been through a breach and want to fight back, or small-business owners managing device fleets. But Shield tier, at £2.99 a month, gives parents something they actually can't get elsewhere: breach monitoring, a phishing scanner that works on QR codes and URLs, Wi-Fi analysis to spot weak networks, and password health checking across services.

What surprised me most is how often parents use it not to panic but to reassure themselves. They run a scan, see the score improve after they fix something, and feel like they're actually doing something. That sense of control is real and it matters. You can't protect what you can't see.