Thousands of Americans have fallen victim to stalkware planted on their smartphones by someone they know - and an Android app is collecting and storing their personal information.

TechCrunch obtained leaked data from the app, apk portal TheTruthSpy, that has a database teeming with personal information like call logs, text messages, location data and passwords from users across the US.

TheTruthSpy, which launched in 2019, markets itself as a way for people to surreptitiously monitor the communications of their spouses. 

Mapping software revealed the app captured 278,861 location data points from Americans over the course of six weeks - a total of 608,966 worldwide.

The database was also held 1.2 million text messages and 4.42 million call logs, which included the duration of calls and apk portal the name and phone numbers of contacts. 

TheTruthSpy has been the center of several data dumps, including one in June when the app was found to expose images of children and other personal photos from victims' personal devices.

DailyMail.com has contacted TheTruthSpy for comment.

Reviews of those who purchased the app shared that it does not deliver what it promises, but it seems capture personal information from phones very easily. 

TechCrunch reports it found about 360,000 unique device identifiers worldwide, APK Portal a number associated with a smartphone and tablet, apk portal which highlights how many devices have been scraped of data during the operation that started on March 4 through April 14, 2022.