There are tools to check for pegasus spyware and others available. You can also regularly wipe and reset your phone. Spyware can infiltrate your devise via links and images sent thru text. Pretty wild.