When someone steals your phone, you have a window of 5 to 15 secondsbefore the thief powers off the device or removes the SIM card. Guardyn was engineered to capture and transmit all evidence within that narrow window.

Here's exactly how the pipeline works, from the moment of detection to the evidence arriving in your inbox.

Step 1: The Guard Triggers (0–2 seconds)

Guardyn uses three hardware sensor-based "guards," each tuned for a different theft scenario:

Charger Guard — monitors the charging state. When the charger is unplugged while the screen is locked, it triggers. Perfect for phones left charging in cafés, airports, and hotel rooms.
Pocket Guard — uses the ambient light sensor. When the phone detects a sudden increase in light (indicating it was pulled from a pocket or bag), it triggers. Designed for pickpocketing scenarios.
Motion Guard — uses the accelerometer. When the phone is lifted or moved from a stationary surface, it triggers. Ideal for phones left on tables or desks.

Each guard has a calibrated response delay (2–5 seconds) to prevent false alarms from normal use. But once the threshold is crossed, the system moves to the next step immediately.

Step 2: The Siren Activates (2–3 seconds)

The first thing that happens after a trigger is the max-volume siren. The alarm overrides the system volume to maximum and plays a loud, piercing siren sound with full-intensity vibration.

The siren serves two purposes:

Deterrence — a screaming phone draws attention. Thieves hate attention. In many cases, the siren alone causes the thief to drop the phone and flee.
Social alarm — bystanders become aware of the situation, making it harder for the thief to blend into a crowd.

Step 3: Evidence Capture (3–5 seconds)

While the siren is blaring, Guardyn initiates the evidence capture pipeline in the background:

Front camera photo — captures the face of whoever is holding the phone
Rear camera photo — captures the surroundings for location context
GPS coordinates — precise latitude/longitude with a Google Maps link
Ambient audio — a short audio clip that may capture the thief's voice or environment
Video clip (Pro) — 10-second video from the front camera for maximum evidence

All evidence is captured simultaneously using Android's foreground service system, which ensures the capture continues even if the thief navigates away from the app.

Step 4: Encryption and Transmission (4–8 seconds)

Captured evidence is AES-256 encrypted on-device and immediately transmitted to a transient Cloud Function. This function does one thing: package the evidence into an email and send it to your registered email address.

The critical design decision here is Zero Cloud Persistence:

Evidence passes through the Cloud Function but is never stored
The function discards all data immediately after email delivery
There is no cloud bucket, no server-side database, no data retention
Your email is the only copy of the evidence

This means even if our servers were compromised, there would be nothing to steal. Your evidence exists only in your email inbox.

Step 5: The Email Arrives (5–15 seconds)

Within seconds, you receive an email with:

Intruder photos attached as high-resolution JPEG files
GPS coordinates with a clickable Google Maps link
Audio/video evidence as attachments (Pro tier)
Device information and timestamp

By the time the thief figures out how to silence the siren or power off the phone,the evidence is already safely in your inbox. It doesn't matter what they do to the phone after that — you have what you need.

Why This Architecture Matters

Most anti-theft apps rely on the phone being online for an extended period. They try to continuously track the phone's location or require you to send remote commands. This fails because thieves disable connectivity immediately.

Guardyn's approach is fundamentally different: capture everything in one burst and transmit immediately. The total time from detection to email delivery is typically under 10 seconds — well within the window before a thief can disable the phone.

That's why Guardyn catches thieves when other solutions fail.

How Guardyn Captures Intruder Evidence in Under 5 Seconds