What Happens to Your Data When You Sell or Donate an Old Device
Photo credit: SyndicateExpert.com | Information At The Ready
In this article
A factory reset isn't always enough. Learn what a proper device wipe involves and what steps actually protect your personal information before you hand it over.
Key Takeaways
- A standard factory reset rarely removes data permanently — files can often be recovered with free software.
- Cloud account sign-outs and account removal must happen before any wipe, not after.
- Encryption combined with a factory reset is the most reliable consumer-level data removal method.
- Physical storage media like SD cards and SIM cards require separate handling before transfer.
- Different device types — phones, laptops, tablets — each have distinct secure-erase procedures.
Why Passing Along an Old Device Is Riskier Than It Looks
Upgrading to a new phone or laptop usually means the old one collects dust — or gets sold, donated, or handed to a family member. That transition moment is one of the most overlooked data security risks in everyday life. Years of photos, saved passwords, banking app sessions, and personal messages can persist on a device long after you think you've cleared it.
The good news is that protecting yourself doesn't require technical expertise. It does, however, require doing more than the obvious. If you've been meaning to clean up storage space on your current device as well, our guide on hidden smartphone storage drains is a useful companion read. But before you hand anything over, the mistakes below are the ones that put people's data at real risk.
Factory Reset Is Not a Data Wipe
Many people treat a factory reset as a complete data removal, but on older devices — especially Android phones manufactured before 2015 — reset functions often only delete the file index, leaving the underlying data intact and recoverable. Anyone with basic data recovery software can retrieve photos, messages, and login credentials from a device that has only been reset. Encryption must be enabled before resetting for the wipe to be meaningfully effective.
The Most Common Mistakes People Make Before Handing Off a Device
The following errors appear repeatedly across all device types — phones, tablets, and laptops alike. Understanding why they happen is just as important as knowing how to avoid them.
Performing only a factory reset and assuming all data is gone.
Why it happens: Device manufacturers use the term "erase all content" in reset menus, which implies permanence. Most users have no reason to question that language.
Forgetting to sign out of cloud accounts and linked services before the reset.
Why it happens: People focus on deleting files and overlook that accounts — Apple ID, Google, Microsoft — remain tied to the hardware until explicitly removed.
Leaving apps installed with saved login sessions and stored passwords.
Why it happens: Users assume a reset clears app data automatically, which is sometimes true — but not always on every platform or device age.
Skipping the secure erase step on older hard-drive-based laptops.
Why it happens: Laptop users often conflate deleting files or reinstalling an operating system with secure erasure, neither of which removes data from a traditional spinning hard drive.
Donating a device with the original operating system profile still intact.
Why it happens: Donors often want to be helpful and leave the device "ready to use," not realizing they are also leaving personal profiles, browsing history, and stored files.
SIM Cards and SD Cards Don't Reset Automatically
A factory reset affects the device's internal storage only. Your SIM card retains contact information and carrier details, and your microSD card keeps every file stored on it. Always physically remove both before handing off any device. If you plan to keep your SIM for your new phone, transfer it yourself rather than leaving it for the next owner.
A Practical Pre-Handoff Checklist
Regardless of device type, a consistent sequence of steps reduces risk significantly:
- Back up what you need. Transfer photos, contacts, and documents to your new device or a secure cloud backup before doing anything else.
- Remove SIM and SD cards physically. These don't get wiped in any reset process.
- Sign out of all cloud accounts from the device's system settings — not just the apps.
- Revoke third-party app access through your Google, Apple, or Microsoft account dashboards online.
- Enable encryption if it isn't already active, then perform the factory reset or secure erase.
- Verify the device shows the setup screen after the wipe — that's your confirmation that it has returned to an out-of-box state.
Spending twenty minutes on these steps protects years' worth of personal information. The device gains value for whoever receives it, and you gain peace of mind.
59%
Used devices sold with recoverable personal data
A study by Comparitech found that roughly 59% of second-hand storage devices purchased online still contained recoverable data from previous owners.
2 in 3
Americans who don't fully wipe devices before disposal
Consumer research by the National Cyber Security Alliance has indicated that a majority of Americans do not take adequate steps to remove data before disposing of old electronics.
Author
Tech & Devices Editorial Team
Tech & Devices Editorial Team is the collective byline for our editorial team and contributor network. Articles published under this byline or an editorial pen name are researched, written, and reviewed according to our editorial standards for clarity, consistency, and independence before publication.
View all articles →