Unauthorized Remote display of Screen

Does this only happen in Notes? If you start a new document in TextEdit - don’t save it - is there any indication that they can see your screen?

Because from what you describe, it sounds more like someone has access to your account, and therefore can view your notes on their own device through iCloud or whatever account your notes are stored in. It’s not spying on or hacking your actual device if that’s the case. Be sure to reset your password to be safe.

Recent versions of MacOS place the System files on a crypto-hashed, locked, virtual System Volume, that is not writeable by ordinary means. if anything changes, you get a promptt notification to re-install MacOS.

That means anything ADDED can be clearly seen in a system report like Etrecheck.

Consider downloading and running this little "discovery" utility, Etrecheck. It changes NOTHING. Etrecheck was developed by a senior contributor here, and uses mostly system calls and simple tests to collect often-needed information.

it contains little tests for speeds of devices, CPU utilization, memory usage, energy usage and a digest of recent problems, in one easy to use package. it does not even need to be Installed. Because less can be learned when your Mac is running great, best time to run is when your problems are actually occurring, if possible.

if you follow the directions faithfully, its report (pre-laundered of all personally-identifiable information) can be "Shared" to the System ClipBoard, then Pasted into an ‘Additional Text’ window in a reply on the forums.

Use Etrecheck Pro for free:

http://Etrecheck.com

Then start a reply on the forums, Click the "additional text" icon and PASTE

<< Be sure to reset your password to be safe. >>

Just to make it completely clear, that's your Apple-Account password, that controls access to your shared information stored in iCloud.

remember that after making that change, each typically connected device your control will need the new password.

(and if someone else has actually hacked your iCloud account, they will not have the new password, and should lose access within a few hours.)

"I have an iPhone 16 pro and a MacBook Pro 2021 with the M1 chip model A2485. Please don’t reply unless you have something useful to add because this is happening I just don’t know how to prove it through records or logs."

-------

Confirming Screensharing and Audio Recording Is Not Occurring:

A. On a Mac:

Toggle off or remove items from the two lists: "Screen & System Audio Recording" and "Screen Audio Recording Only"

1. Go to: System Settings
2. Click: Privacy & Security
3. Click: Screen & System Audio Recording
4. Toggle Off: what is not needed (or remove it by selecting it and clicking the "-" button)

B. Getting a Log of Screensharing Sessions:

If performing a chat session, such as with Microsoft Agent, then you can print the log. As for records, that is not an option, other than looking at a call log on your phone. A script would need to be created in software --as for which one, I am not certain, though, for legal purposes, you should let others know that screen recording and audio reading may be permitted.

<< My evidence is that I can write something in “notes” and I can hear the people in question reading it. >>

if the sounds are coming form your Mac, you may have enabled accessibility features related to text-to-speech. there are several different ones.

If the sounds are not coming from your Mac, you might be interested in this very recent research:

New research suggests schizophrenia’s “voices” may stem from the brain mistaking its own thoughts for external sounds.

https://www.psychiatrist.com/news/new-clues-why-schizophrenia-patients-hear-voices/

<< I’ve written an email and heard them reading it. >>

how was that possible?

are these your roommates, co-workers?

are these people who could be deliberately pranking you?