They use screenshots and/or a keylogger to log messages and gather information from different apps on the phone. Then, they send data to the web server, where you access it in your dashboard.