Anticipating Technology-Facilitated Abuse: Evidence-Informed Heuristics for Human-Centered Software Development

Background: Technology-facilitated abuse can arise not only from spyware and stalkerware but also from legitimate applications misused for surveillance and coercive control. Addressing these risks requires considering how software decisions affect privacy, autonomy, and safety in domestic violence contexts. Objective: This study aims to translate evidence on technology-facilitated abuse into development heuristics for anticipating the misuse of legitimate software features. Method: We conducted a systematic literature review of 62 primary studies addressing spyware, stalkerware, dual-use applications, and technical and sociotechnical approaches to technology-facilitated abuse. Based on the synthesized evidence, we derived 12 Heuristics for Abuse-Aware Software Development (HDSL), organized into five dimensions. Results: The findings show that abusive use depends not only on software functionality but also on access conditions, consent, permissions, and interpersonal contexts. Abusers may exploit legitimate or previously authorized access, while protective mechanisms may introduce additional safety risks. The resulting heuristics address abuse analysis, access and control, transparency and awareness, autonomy and recovery, and sociotechnical safety. Conclusion: The HDSL provide evidence-informed guidance for considering potential misuse, human safety, and autonomy during requirements engineering and software design, extending prevention beyond malicious software detection.