Protect Your Data Before Your Phone Changes Hands
Trading in your old phone is a smart move. You get some value back, and the phone gets a second life instead of sitting in a drawer or ending up as e-waste. But before you hand it over, whether to a retailer, a trade-in program, or a private buyer, you need to make sure every trace of your personal data is removed. Your phone contains an extraordinary amount of sensitive information: photos, messages, banking apps, saved passwords, location history, health data, and more.
This guide covers the essential steps for both iPhone and Android devices to ensure your data is properly wiped before the phone leaves your possession.
Before You Wipe: Preparation Steps
Back up your data. Before erasing anything, make sure everything you want to keep is safely backed up. For iPhone, use iCloud Backup or back up to a Mac/PC via Finder or iTunes. For Android, use Google Backup or your manufacturer’s backup service (Samsung Cloud, etc.). Verify the backup completed successfully before proceeding.
Transfer your eSIM. If your phone uses an eSIM rather than a physical SIM card, you’ll need to transfer it to your new device or remove it from the old one. Your carrier can assist with this process.
Remove your physical SIM card. Use the SIM ejection tool (or a straightened paperclip) to remove the SIM tray. Keep your SIM card for your new device or dispose of it separately by snapping it in half.
Unpair connected devices. If you have a smartwatch, wireless earbuds, or other accessories paired with the phone, unpair them through the phone’s Bluetooth settings first. This is particularly important for Apple Watch, which stores data that needs to be erased through the unpairing process.
Wiping an iPhone
Step 1: Sign out of iCloud and disable Find My iPhone. Go to Settings > [Your Name] > Sign Out. Enter your Apple ID password when prompted. This removes the Activation Lock, which would otherwise prevent the next owner from setting up the device. If you skip this step, the phone will be essentially unusable by anyone else.
Step 2: Erase all content and settings. Go to Settings > General > Transfer or Reset iPhone > Erase All Content and Settings. Enter your passcode and Apple ID password when prompted. The phone will take a few minutes to complete the process.
What this actually does: Modern iPhones (iPhone 3GS and later) encrypt all data stored on the device. When you perform the erase function, the phone destroys the encryption keys rather than overwriting every byte of data. Without the keys, the encrypted data is cryptographically irretrievable. This is effectively equivalent to a secure wipe for practical purposes, and it’s why Apple’s erase process completes in minutes rather than hours.
Step 3: Verify. After the erase completes, the phone should restart and display the initial “Hello” setup screen. If it asks for an Apple ID and password, the Activation Lock wasn’t properly removed. You’ll need to sign in with your Apple ID to remove it before the phone can be used by someone else.
Wiping an Android Phone
Step 1: Remove your Google account. Go to Settings > Accounts (or Users & Accounts) > Google > Remove Account. This step is important because Android’s Factory Reset Protection (FRP) will lock the phone to your Google account if you factory reset without removing the account first.
Step 2: Encrypt the phone (if not already encrypted). Most modern Android phones are encrypted by default. If yours isn’t (check Settings > Security > Encryption), encrypt it before performing the factory reset. Encryption ensures that even if any data fragments survive the reset, they’re unreadable without the encryption key.
Step 3: Perform a factory reset. Go to Settings > System > Reset Options > Erase All Data (Factory Reset). Some manufacturers place this in slightly different menu locations, but searching “Factory Reset” in Settings should find it. Confirm the action and enter your PIN or password when prompted.
Step 4: For extra security. After the factory reset completes and the phone restarts to the setup screen, you can add an additional layer of protection. Set up the phone as a new device (skip adding any accounts), then fill the storage with dummy data (take photos of a blank wall, download large free apps) and perform a second factory reset. This overwrites the storage locations that previously held your data.
What About SD Cards?
If your phone has an expandable storage slot with an SD card, remove it before trading in. SD cards are not erased by a factory reset. You can either keep the card for use in your new device, format it (which removes the file index but doesn’t securely erase data), or physically destroy it if it contained sensitive information.
After the Wipe
Once you’ve confirmed the phone is fully erased, remove the SIM card if you haven’t already, and give the phone a quick physical inspection. Remove any case, screen protector, or personal accessories. Clean the screen and body with a microfibre cloth.
If you’re trading through a retailer or official program, they’ll typically verify the phone has been reset and check its condition. If selling privately, make sure the buyer can set up the phone with their own account without encountering any locks or account prompts tied to you.
Taking these steps protects your personal information and ensures the phone can be properly set up by its next owner. Whether your old phone is heading for refurbishment and resale or responsible recycling, proper data removal should always be the first step. For business phones that have accessed corporate data, consider consulting your IT team about whether additional data sanitisation steps are required before the device leaves your organisation’s control.
EWV helps Victorian businesses manage e-waste and IT asset disposal compliantly and sustainably — including collection, certified data destruction, and recycling. Contact us for a free quote.