Get deals & exclusive offers directly in your inbox.
Introduction
The SIM Card and eSIM Profiles
External MicroSD Memory Cards
Personal Cloud Accounts and User IDs (Apple ID / Google Account)
Saved Passwords, Autofill Data, and Payment Cards
Bluetooth Pairings and Connected Smart Devices
Final Thoughts
FAQ
Every day, people sell phones and devices without checking what stays inside. In 2014, security firm Avast bought 20 used Android phones online and recovered more than 40,000 photos, plus emails, texts, and even a loan application, although the sellers had wiped the devices.
Consider Riya's story: she sold her old phone to a stranger but forgot to sign out of her Google account. Her phone data remained tied to her active Google account. The buyer gained full access, changed her passwords, viewed her private cloud photos, and made purchases with her saved card. Riya spent weeks recovering her accounts and disputing charges.
There are five main items that cause these problems, and you should remove them before selling. Keep reading to learn what each one is, why it matters, and how to remove it, so your phone data stays with you, not with the buyer.
The SIM card links your phone to your number and carrier. An eSIM does the same job digitally. A SIM stores your subscriber identity. An eSIM profile is a downloadable version stored in the phone's chip.
Purpose: Both authenticate you on the network and deliver your calls, texts, and one-time passwords. Your number unlocks much of your phone data, so a leftover profile lets a stranger intercept verification codes. Remove the physical SIM and delete eSIM profiles in mobile settings before you sell.
A microSD card is a small removable chip that expands your storage. It holds photos, videos, documents, and app files, often without encryption.
Purpose: A microSD card adds storage and lets you move files between devices. Deleting a file does not erase it. The file stays on the card until new data overwrites it, and free recovery tools restore it within minutes. Anyone can pull the card out and read it without unlocking your phone. Remove the card and keep it, so your phone data never reaches the buyer.
Personal Cloud Accounts and User IDs (Apple ID / Google Account)
Your Apple ID or Google Account is your identity across each company's services. It syncs contacts, photos, backups, messages, and purchases across your devices.
Purpose: It powers security features such as activation lock and factory reset protection. If you stay signed in, the buyer cannot log in to the device, and your accounts stay exposed. Signed-in accounts expose your phone data to anyone who powers the phone. Sign out, remove the device from your account's device list, then reset. Do this before you sell phone hardware.
Your browser, keychain, and wallet app save logins, addresses, and cards. Autofill data fills forms automatically. Wallet apps store tokenised versions of your cards.
Purpose: These tools speed up logins and checkout. In a stranger's hands, they speed up fraud. This phone data enables instant purchases, so delete saved passwords, clear autofill entries, and remove cards from Google Wallet or Apple Pay.
Bluetooth pairings let your phone recognise your gadgets. Each pairing stores a trusted-device key that reconnects automatically.
Purpose: Pairings let your phone connect to earbuds, cars, and smart-home gadgets without setting up each one again. Your car may still store your contacts and call history, and your smart-home app may still control your door locks and cameras. Unpair each device from both sides, then sign out of your smart-home apps. Bluetooth records also count as phone data, so clear them before selling your phone.
Follow this order: back up, sign out, unpair, remove cards, remove storage, then factory reset. Each step protects you, so do not skip any. A five-minute check protects years of privacy and saves you weeks of account recovery and disputing charges. Before you sell your phone, run through the checklist above and confirm the device shows a fresh setup screen when you restart it. Your phone data belongs to you, so make sure it stays with you.
Q1. Does a factory reset alone protect me?
No. Sign out of your accounts, remove your cards, and unpair your devices first.
Q2. Should I remove the SIM card before I reset the phone?
Yes. Remove the physical SIM and delete any eSIM profiles first, so no one receives your verification codes.
Q3. Can someone recover files from my microSD card after I delete them?
Yes. Free recovery tools restore deleted files, so remove the card and keep it.
Q4. What happens if I forget to sign out of my Apple ID or Google account?
The activation lock stays on, and the buyer can use the device, while your account stays exposed and accessible to the owner.
Q5. Do I need to unpair my Bluetooth devices?
Yes. Unpair each device from your phone so no one else can connect to your gadgets.
