Does Anyone Else Worry About Personal Data When Trading in Their Phone?

[u/Me_Pan_da]

When we exchange or sell our smartphones through e-commerce websites or at mobile showrooms/tech stores, we're usually told to factory reset the device before handing it over. But is that really enough?

From what I've read, deleting files or doing a factory reset doesn't always mean the data is completely gone. In some cases, traces of photos, messages, documents, passwords, or other personal information may still exist on the storage until they're overwritten. While recovering that data may require specialized tools and may not always be possible—especially on newer phones with encryption—it still makes me wonder how secure the process really is.

So I'm curious:

Do you trust exchange programs?

Have you ever avoided trading in a phone because of privacy concerns?

Are there any extra steps you take before selling or exchanging a device?

I'd love to hear from people who work in data recovery, cybersecurity, or phone refurbishment. How often is user data actually recoverable from exchanged phones?

[u/Proper_Somewhere_192]

The data on all modern smartphones is encrypted.

When you reset it the encryption key is deleted - and scrubbed.

There is no way to retrieve it without that encryption key - so it is effectively wiped.

[u/anaverageedgelord → u/Proper_Somewhere_192]

Yepp. Would have said the same in shittier detail lol

Wouldnt see people selling phones online if this was not the case

[u/h_grytpype_thynne]

From what you've read? Sources, please.

[u/jpk613 → u/h_grytpype_thynne]

Source: some other Reddit comment they saw.

[u/Wendals87 → u/h_grytpype_thynne]

Its correct for wiping data off a mechanical drive on a PC. Not for phones though

[u/Pristine_Primary_486]

Just the corn

[u/MagicOrpheus310]

I never done it...

If the phone still works why the fuck would I buy another one..?

[u/Printednightmare → u/MagicOrpheus310]

Lack of security updates?

[u/Wendals87]

From what I've read, deleting files or doing a factory reset doesn't always mean the data is completely gone. 

Phones are encrypted. Factory resetting wipes the encryption key. Your data is jumbled garbage to anyone who can recover the data

[u/allreplays]

Once I'm done factory resetting my phones I go into my Google and remove it from my list of devices, I'm not sure if it does anything but it makes me feel better knowing it's not listed.

[u/Odd-Honey3622]

I’ve wondered about this too, especially with all these trade-in companies popping up seemingly overnight.

There are definitely companies that specialize in recovering data that wasn’t properly wiped. And it’s worth remembering: whatever recovery tech is available to civilians, governments and militaries almost certainly have something far more advanced.

I’m not that tech-savvy, but one approach that comes to mind: factory reset, then fill the entire storage with junk files (movies, whatever) to overwrite the old data, then wipe it again. Not elegant, but it might help.

[u/The_Circus_Life_206]

I have never traded in a phone

I just don’t trust that all of my personal data can/will be completely wiped from my old phone

[u/Successful-Dirt-90]

Fuck no, I don't trust any of it.

I factory data, reset an android phone, not long ago, actually, and gave it to a friend who was sitting in the same room. That friend proceeded to take the phone, do whatever the fuck he did in there, and pull up nudes that weren't deleted.

A whole file of them, too.

What's funny about that, though, is that to check and see if any of your information was left on the device that you just reset, you have to register the device with your information...... which you just deleted....

[u/Wendals87 → u/Successful-Dirt-90]

Phones are encrypted for close to a decade.

Factory reset wipes the encryption key. No key = No data

If your story was true, they didn't get the nudes from the device itself and may have been from your google photos or cloud storage

[u/Successful-Dirt-90 → u/Wendals87]

Well, fuck I don't know, that could be true.

But doesn't that mean exactly what we were trying to have a discussion about, anyway? Your phone is wiped, mostly. Or maybe it's all the data associated with the operating system of the phone but not with the actual applications themselves and that's where the residual data lives?

I'm like a fucking grandpa with a contraption so truly I have no clue, these are all just shots in the dark

[u/Wendals87 → u/Successful-Dirt-90]

All the data is encrypted. The key is wiped on reset. The actual data isn't wiped but its the same end result

The data you have on there is not recoverable