There is a lot of Spyware that will run on all devices. If anyone has access to your phone, and has seen you PIN, it can be installed, and it’s nearly impossible to find. If it’s not persistent (meaning it reinstalls after a restore, or if it’s cloud based (not Apple ICloud), it can also access.
one thing you can try, reset your phone to factory settings. Prior to this, save photos and documents to a USB device. You should also change your Apple ID, check periodically that it’s not been re-enabled (try to sign into the iCloud on a device that does not belong to you. Since you can sign in with a phone number, you would also need a new phone number for your new ID. You can keep your old phone number, but remove it from trusted devices under Apple.
Don’t restore apps (if you change ID, you can’t keep them anyway. Make sure you have deleted any paid apps to prevent payment. Before all of this, are you certain someone is monitoring?
Or, just get used to the idea that someone is watching. Never leave your phone lying around, think of it as $50k in cash! You can also add a more complex PIN on your device so that someone can’t shoulder surf as easy to get access with known PIN.
And make sure your router is encrypted, search on War Driving to learn how ppl can view unencrypted data by scanning your network. Use different passwords for different accounts. I would suggest you use a different email account instead of your Apple ID for email. I’ve encountered many issues related to this type of activity. I wish it was just someone reading my messages and email! Apple also provides several added security features, read about them. They are preventative however.