How to Remove Personal Data From a Used Phone Before Selling It
I’ll help you remove your accounts, photos, messages, eSIM, and device-tracking access before you sell or give away a used phone. You’ll also get a recovery plan for common problems, including forgotten passwords, failed backups, and reset options that don’t appear as expected.
Selling a phone is more than deleting a few photos and handing it over. Personal information can remain in accounts, backups, messaging apps, browser data, device-tracking services, and an active eSIM. If you erase the phone too early, you may also lose the chance to recover something important or remove a security lock that prevents the next owner from using it.
The safest approach is to work from the outside in: preserve your data, disconnect accounts and services, remove the cellular identity, perform the correct encrypted reset, and then inspect the phone as if you were the buyer. The names of menus vary by manufacturer and software version, but the sequence is broadly the same.
1. Make a complete backup before changing anything
Start with the data you want to keep. Check that your contacts, photos, videos, messages, notes, calendars, authenticator entries, documents, and app data are available on another device or in a cloud service. A phone showing that it is “synced” doesn't necessarily mean every item has finished uploading, particularly large videos, downloaded files, or data stored only inside a particular app.
Open your phone’s backup settings and look at the most recent successful backup. Then inspect the services that matter separately. For example, photos may use a dedicated photo service, messaging apps may have their own backup system, and files downloaded to the device may not be included in the normal phone backup at all. If you use an authenticator app, transfer its accounts or save its approved recovery codes before wiping the phone. Banking and password-manager apps may require separate reactivation on your replacement device.
A useful recovery check is to sign in to your main cloud account from a computer or another phone. Confirm that recent photos, contacts, and important files are actually visible there. If you use a physical memory card, copy its contents separately; resetting the phone may not erase it, but leaving it behind can expose personal data.
Confirm your backup before erasing: Open your cloud storage, photo library, contacts, and any important app backup from another device. If the newest items aren’t there, keep the old phone intact and finish the backup first.
2. Check for information that is easy to overlook
Before disconnecting accounts, review the phone manually. Look in the Files or Downloads app, recently deleted folders, voice recordings, screenshots, offline maps, scanned documents, and notes. Check email and messaging apps for attachments that may not be part of the standard phone backup. Also review browser downloads, saved addresses, autofill details, and locally stored passwords.
Pay attention to apps that store data separately from the operating system. Work-profile apps, secure folders, private photo vaults, health applications, and some chat services may need their own export or account-removal process. If the phone has multiple user profiles, remove the additional profiles as well as the main one.
If you’re giving the phone to someone you know, don’t rely on that relationship as a privacy measure. The next user may unintentionally see old notifications, cloud content, or account prompts. Treat a gift the same way you’d treat a sale.
3. Remove payment cards, passes, and connected accounts
Remove cards and passes from mobile wallets, transit apps, payment services, and store accounts. Some services let you remove a device remotely if the phone is no longer available, but doing it while you still have the phone is simpler and gives you an opportunity to confirm that the cards are gone.
Sign out of email, social-media, shopping, streaming, work, and personal cloud accounts. You usually don’t need to delete the accounts themselves. The goal is to remove the account from this phone and revoke its local access. If an app offers “remove account from this device,” use that option rather than merely closing the app.
Where practical, review the account’s list of signed-in devices from a browser. Remove the old phone after you’ve completed your backup and account sign-out. This is particularly important for accounts that can approve logins, display private messages, or reset other passwords.
Some phones use account protection after a reset. On an iPhone, this is associated with Activation Lock and the Apple Account’s Find My service. On Android phones, factory-reset protection can require the previously used Google account. Removing the relevant account and disabling the device-tracking feature before the reset helps prevent the buyer from being asked for your credentials.
Verify the phone is no longer tied to you: From your account’s device list or tracking service, confirm that the old phone has been removed or marked for removal. If it still appears as your active device, don’t assume the factory reset will solve the problem.
4. Handle device tracking and theft-protection features
Turn off services that locate, lock, or remotely erase the phone. Common examples include Apple’s Find My, Google’s Find My Device, and manufacturer-specific tracking tools. Depending on the phone, disabling tracking may require your account password, an internet connection, or a short delay.
Don't use a tracking service’s “erase” command as a substitute for preparing the phone in person unless you no longer have access to it. A remote erase may protect your data, but it can leave the device associated with your account or make it harder to confirm that the next owner can activate it. If the phone is lost rather than being sold, remote protection is the appropriate priority; for a sale, complete the normal removal and reset while the device is in your hands.
If you’ve already reset the phone and the buyer reports an account lock, sign in to the relevant tracking service from another device and remove the old phone from your account. Avoid giving the buyer your password. Account removal should be completed through the official service, not by sharing credentials or using an unofficial unlocking tool.
5. Remove the SIM and decide what to do with the eSIM
Take out a physical SIM card before handing over the phone. It contains a mobile identity and may still receive calls or messages if the line remains active. Return it to your carrier, destroy it, or keep it according to your carrier’s instructions. A memory card is different: it can contain personal files, so remove it and either keep it or erase it separately.
An eSIM is built into the phone and can't be removed by pulling out a card. During the factory-reset process, look for an option to erase the eSIM along with the device. If you’re transferring the phone to another person, erase the eSIM profile after confirming that your replacement phone or carrier account is working. If the carrier provided a transfer process, follow that process first.
Deleting an eSIM profile from the phone doesn't necessarily cancel your mobile plan. Contact the carrier if you’re ending service, changing ownership, or moving the number. Carrier procedures, activation rules, and support options differ by country and provider.
Check the current eSIM instructions: Before erasing the phone, confirm with your carrier whether the eSIM should be transferred, deleted, or replaced. This is especially important if the number is used for two-factor authentication or account recovery.
6. Perform the correct factory reset
A normal factory reset removes user data and returns the phone to its setup state. Modern iPhones and most current Android phones encrypt user storage by default, so a properly completed reset removes the encryption keys that make the old data readable. That is why the reset should be performed through the phone’s official settings rather than by simply deleting files or formatting random folders.
On an iPhone, look for the option to erase all content and settings in the general transfer or reset settings. The process may ask for the device passcode and Apple Account password, then offer to erase the eSIM. On Android, the reset is usually under system or general-management settings, although the exact wording and location depend on the manufacturer. Look for “erase all data,” “factory reset,” or similar language, and read the final confirmation carefully.
Keep the phone powered and connected to a reliable network if the reset requires account verification. Don’t interrupt it while it is erasing. If the settings app is malfunctioning, a recovery-mode reset may be available, but it isn't always the best first choice: using recovery mode before removing accounts can trigger account-protection prompts for the next owner.
If the phone is unusually old, has been modified, or uses an outdated operating system, encryption behavior may differ. In that case, update it if practical, remove accounts first, and follow the manufacturer’s official reset instructions. Avoid third-party “secure wipe” apps that promise more than the operating system can reliably deliver.
7. Inspect the phone after the reset
When the reset finishes, stop at the initial welcome or setup screen. Don’t sign back in just to check whether your data is gone. Instead, look for signs that the old account remains: your name, profile photo, old Wi-Fi networks, recent calls, photos, messages, saved accounts, or a request for your Apple Account or Google account.
If the phone starts at a normal setup screen and doesn’t display your personal information, that is a good sign. Test the physical condition separately: remove any case and screen protector you intend to keep, clean the exterior without getting liquid into openings, and include only the accessories you’ve decided to provide. Record the phone’s serial number or IMEI for your own transaction records, but don’t post those identifiers publicly.
If you’re selling through a marketplace, describe the device accurately and retain proof of the reset and handoff. Current marketplace rules, carrier requirements, taxes, and ownership-transfer procedures vary by location, so check the service and carrier instructions that apply to your transaction.
Do one final privacy inspection: Start the phone without restoring a backup. Confirm that it shows the welcome/setup screen, contains no personal content, has no active SIM or eSIM belonging to you, and doesn't request your account to activate.
If something goes wrong
If the backup is incomplete, stop and recover the missing data before resetting. If you’ve forgotten an account password, use the provider’s official recovery process and wait until you can sign in successfully from another device. If two-factor authentication sends codes to the phone you’re selling, add another verified method before removing the phone from your account.
If the phone is stuck during a reset, leave it connected to power for a reasonable period and consult the manufacturer’s support instructions for that model. A forced restart may be appropriate, but repeated interruptions can complicate recovery. If the buyer reports Activation Lock or factory-reset protection, remove the device from your official account remotely; never send your password or ask the buyer to bypass the lock with unofficial software.
The finished phone should be at its welcome screen, disconnected from your accounts, free of your SIM or eSIM, and ready for a new owner to activate. Taking a few extra minutes to verify those points is far safer than trying to recover private information after the phone has changed hands.