Safely wiping an old phone, and when to destroy it instead
An old phone often disappears into a drawer, and eventually you sell or give it away. The trouble is it holds more than you think. Photos, messages, saved passwords and your banking app. With the right steps you wipe that data safely before the device gets a second life. And sometimes wiping is not enough and physically destroying it is the wiser choice.
Want to gauge quickly what applies to you? Run through these questions.
- Does the phone still work and can you unlock it?
- Are you signed out of iCloud or your Google account?
- Have you already taken out the SIM card and memory card?
- Was there sensitive data on it, such as a banking or identity app?
- Is the screen broken or does the device no longer turn on?
If you hesitate on any of these, the sections below show exactly what to do. First the wiping, then the question of when to have it destroyed.
What is actually on your old phone?
A phone has long been more than a calling device. It is your photo album, your inbox, your wallet and your keyring in one. A typical device holds years of photos and videos, often with location attached. Beyond that there are WhatsApp and text conversations, email, contacts and your calendar. The browser holds saved passwords and auto-filled addresses. Your banking app, a payment app or a wallet sit ready to use. And increasingly an identity app or an authenticator that grants access to government and healthcare services.
If such a device ends up with a stranger unwiped, that person can look into your private life or even try to log in to your accounts. That is why wiping is not a luxury but a fixed step before you say goodbye. The good news is that on a modern phone it is quick and reliable.
Wipe or destroy: when do you choose which?
For most people selling or giving away a working phone, a secure wipe is the right route. You follow a fixed checklist, run a factory reset and the device gets a clean second life. That is good for your privacy and good for the environment, because reuse saves raw materials.
Physical destruction is the better choice in a few specific cases. A broken phone you can no longer wipe. Highly sensitive data you want gone for certain. And a device that was lost and then turned up again, where you cannot be sure whether the storage was tampered with. Below you first read how to wipe safely and then when you cross that line. The difference between wiping and destroying is also explained in wiping versus destroying a hard drive.
Step 1: make a backup first
Wiping is irreversible, so begin with a safe copy of what you want to keep. On an iPhone you back up to iCloud or to your computer. On Android this goes through Google One or your brand's backup feature. Then genuinely check that the backup succeeded and that your photos, contacts and messages are in it. Only once the copy is right do you continue. A backup you never checked gives false certainty.
Step 2: sign out and turn off the lock protection
This is the most important step, and it is precisely where things often go wrong. Modern phones have a theft protection tied to your account. On the iPhone it is called Find My and the Activation Lock, on Android it is the factory reset protection linked to your Google account. If you reset without signing out, the device stays tied to your account and the next owner cannot activate it.
So first take the phone out of this protection. On the iPhone turn off Find My iPhone and sign out of your Apple account. On Android remove your Google account in the settings before you reset. Also remove paired smartwatches and payment cards from your wallet. That way you hand over a clean device the other person can simply use.
Step 3: remove the SIM and memory card
A factory reset wipes the phone itself, but not the loose cards. A SIM card can hold contacts and text messages. A microSD card in an Android device often holds photos and documents. Remove both before you part with the device. Keep the SIM card or cut it up if you no longer need it. Take the memory card with you, or have it destroyed together with the phone if it holds sensitive files.
Step 4: check that encryption is on
The factory reset on a modern phone works so well because the storage is encrypted. When wiping, the device throws away the key, which makes the encrypted data unreadable in one stroke. This is also called cryptographic erasure. On almost every iPhone from iOS 8 onwards and on Android from version 6 onwards that encryption is on by default. You usually need do nothing for it. If you are unsure about an older device, you can check in the security settings whether encryption is enabled. If it is off and you can turn it on, do so before you reset.
Step 5: run the factory reset
Only now do you reset the phone to factory settings. On the iPhone this goes through Settings, General, Transfer or Reset, then Erase All Content and Settings. On Android it is called Factory data reset or Erase all data, found under system or general management. The device asks for confirmation and then wipes everything. After the reset the phone starts up as new, without your data. Finally check that it is no longer tied to your account before you pass it on.
The wiping checklist at a glance
- Make a backup and check it is complete.
- Sign out of iCloud or your Google account and turn off Find My or the reset protection.
- Remove paired devices and payment cards from your wallet.
- Take out the SIM and memory card.
- Check that encryption is on.
- Run the factory reset and confirm the device is free of your account.
iPhone step by step
On an iPhone everything revolves around your Apple account. First make an iCloud backup through Settings, your name at the top, iCloud and iCloud Backup. Then go to Find My and turn off Find My iPhone, for which you enter your password. Next sign out of your Apple account at the bottom of the settings screen. Take the SIM card out of the tray on the side. Then choose Settings, General, Transfer or Reset and Erase All Content and Settings. The iPhone is then empty and no longer tied to you.
Android step by step
On Android the menu differs by brand, but the steps are the same. Make a backup through Settings and Google, or through the brand's own backup from Samsung, Xiaomi or another make. Then remove your Google account under Settings, Accounts. That turns off the reset protection so the next owner can use the device. Take out the SIM and microSD card. Then go to Settings, System or General management, and choose Factory data reset. Confirm and the device wipes itself completely.
Why a reset falls short on very old phones
The reset is reliable as long as the storage is encrypted. On very old devices from before roughly 2015 encryption was not standard. A reset then mostly wiped the pointers to the files, while the data itself remained on the chip and could sometimes be recovered with special software. This resembles the problem with wiping an SSD, where overwriting does not always work. If you have such an old device with sensitive content, wiping alone is no guarantee. Destruction is then the surest way.
When it is better to destroy
There are situations where a reset is not enough or even impossible. In those cases physical destruction is the safe choice.
- The phone is broken. A dead screen or a device that no longer turns on cannot run the reset, while the data stays on the chip.
- Highly sensitive data. If it held medical information, work files or access to important accounts, you want no residual risk at all.
- A lost phone that came back. If a device went missing and then turned up, you cannot be sure whether the storage was tampered with.
- A very old device without encryption where a reset gives no guarantee.
If you worked from home with business data on your phone and you lost it or want company data gone for certain, also read how companies handle this in destroying corporate smartphones and tablets.
How professional destruction works
In destruction the phone goes through a special shredder that grinds the casing and the memory chips into small particles. The data is then physically impossible to recover, because the chip literally no longer exists. We collect the device from you within 20 km of Amsterdam, with no call-out fee. Beyond that we work with pooled routes across the country. So you do not have to go anywhere, it is collected at your home.
If you have more than one phone, or also an old laptop, a few USB sticks or a box of paper, all of that can come in the same collection. You pay a fixed price per item that you know in advance. Afterwards you receive a certificate of destruction, giving you in black and white that the data was made unreadable. More on the whole approach is on the page about data destruction.
Recycling after wiping or destroying
A working phone you have wiped deserves a second life. Selling, giving away or handing it in at a take-back scheme keeps valuable raw materials in circulation. If you hand it in at a shop or a collection point, always wipe it yourself first and do not rely on the promise that the chain will do it. With a destroyed device recycling stays possible too, because after shredding the metal and the plastic go to material recycling. Clearing out safely and treating your old device sustainably go together fine.
What does destroying a phone cost?
For consumers destruction works at a fixed price per item, which you hear in advance. Because you can combine several devices and paper in one collection, it pays to hand everything over at once. That way you pay for the trip only once. Within 20 km of Amsterdam there is no call-out fee. If you want to know how the pricing looks with more devices, see the cost of destroying smartphones. The structure is the same for a consumer, only the quantities are lower.
Common mistakes
- Resetting without signing out. The device stays tied to your account and the other person cannot activate it.
- Leaving the SIM or memory card in. A reset does not wipe those.
- Not making a backup. Wiping is final, so copy first.
- Trusting a reset on a very old or broken device. Only destruction gives certainty there.
- Tossing a broken phone in the bin. That is unsafe for your data and bad for the environment.
From drawer to safely gone in steps
- Decide whether the device still works. If it does, you wipe it. If it does not or the data is highly sensitive, you have it destroyed.
- Make a backup and check it.
- Sign out and turn off the lock protection.
- Take out the cards and run the factory reset.
- Sell, give away or recycle the clean device, or have it collected together with other carriers for destruction with a certificate.
Have an old or broken phone safely destroyed?
Tell us what you have and you get a fixed price in advance. We collect your phone, together with any laptops, USB sticks or paper, destroy it all and you receive a certificate. No call-out fee within 20 km of Amsterdam.
Request a quoteFrequently asked questions
Is a factory reset enough to wipe my phone?
On a modern phone with encryption on by default a factory reset is enough, provided you first sign out of iCloud or your Google account and turn off Find My. On very old devices without encryption a reset can leave data behind.
What do I do with a broken phone I can no longer wipe?
If the screen is broken or the phone will not turn on, you cannot run the reset. Physical destruction is then the safest choice, because otherwise the data stays readable on the chip.
Should I remove the SIM card before giving my phone away?
Yes. Remove the SIM card and any memory card before you sell or hand in the phone. A factory reset does not wipe those cards.
What does it cost to have an old phone destroyed?
Destruction is priced per item at a fixed price agreed in advance. You can combine several phones and other data carriers in one collection. Within 20 km of Amsterdam we charge no call-out fee.
Can I still recycle my phone after destruction?
Yes. After shredding the metal and the plastic go to material recycling. Clearing out safely and treating your device sustainably go together.
Conclusion
An old phone is full of personal data, so clear it out carefully before you part with it. If the device still works, make a backup, sign out, take out the cards and run a factory reset. On a modern phone that is safe and reliable. If the device is broken, very old or held highly sensitive data, choose physical destruction with a certificate. That way you know for certain that your photos, messages and passwords do not end up with someone else.
See also our pillar on archive destruction for individuals and the other guides in this series: keeping or destroying CDs and DVDs, safely destroying passport and ID copies and safely destroying bank and credit cards.
Have a phone safely destroyed? Request a quote via desnipperaar.nl. We collect it, destroy it and you receive a certificate as proof.
Related guides: Telecom shops: destroying customer contracts.