When you're done with a phone, computer, or tablet, selling it, donating it, or throwing it away seems simple. But that old device contains years of personal data: emails, photos, browsing history, saved passwords, financial information, and more. Simply deleting files or doing a factory reset often isn't enough to protect that data from recovery. Proper disposal requires understanding what actually erases data and what just hides it.
Why Factory Reset Isn't Always Enough
A factory reset sounds comprehensive. It returns your device to its original state, as if it just came out of the box. But what it actually does varies by device and operating system, and it's not always as thorough as you might think.
On most devices, a factory reset doesn't actually erase your data. Instead, it removes the pointers to that data, telling the system that the space where your files were stored is now available for new data. The actual data remains on the storage drive until it gets overwritten by new information. With the right tools, much of that data can be recovered.
This is similar to emptying your recycling bin on a computer. The files seem gone, but they're still on the hard drive, just marked as deletable. Recovery software can find and restore them. The same principle applies to factory resets on phones, tablets, and computers.
Secure Data Wiping Methods
For Smartphones and Tablets
Modern smartphones with encryption enabled are more secure when reset. If you've been using a screen lock password on an iPhone or recent Android device, your data is encrypted. A factory reset removes the encryption key, making the data extremely difficult to recover even though it's technically still on the device.
For iPhones and iPads, first make sure Find My iPhone is turned off. Go to Settings, tap your name, then Find My, then Find My iPhone, and toggle it off. Then go to Settings, then General, then Transfer or Reset iPhone, then Erase All Content and Settings. This performs a secure erase that removes your data and the encryption keys.
For Android devices, the process varies by manufacturer. Generally, go to Settings, then System, then Reset Options, then Erase All Data (Factory Reset). Make sure your device is encrypted first. On Android 6.0 and later, encryption is typically enabled by default if you use a lock screen password, but verify in Settings under Security.
Before resetting any mobile device, back up your data to transfer to your new device, remove your SIM card and any SD cards, and sign out of all accounts, especially your Google or Apple account.
For Computers with SSDs (Solid State Drives)
Most modern laptops and many desktops use SSDs instead of traditional hard drives. SSDs store data differently, and secure deletion is handled differently too.
On Windows computers with SSDs, use the built-in reset feature. Go to Settings, then Update & Security, then Recovery, then Reset This PC. Choose "Remove everything" and then "Remove files and clean the drive." This performs a more thorough wipe than just removing files.
On Mac computers with SSDs running macOS 10.15 or later, the system uses encryption by default (FileVault). To wipe a Mac, restart while holding Command+R to enter Recovery Mode, then use Disk Utility to erase the main drive, choosing APFS format. Then reinstall macOS. This removes the encryption keys, making data recovery virtually impossible.
For older Macs with macOS 10.14 or earlier, after erasing in Disk Utility, you could use the "Security Options" to overwrite the data multiple times, though this isn't available on newer macOS versions with SSDs since encryption makes it unnecessary.
For Computers with Traditional Hard Drives
Traditional hard disk drives (HDDs) require more thorough wiping because data can be easily recovered after a simple format or deletion.
Use data wiping software that overwrites the entire drive multiple times. DBAN (Darik's Boot and Nuke) is a free, well-regarded tool that boots from a USB drive and completely overwrites your hard drive. It can take several hours depending on drive size, but it makes data recovery extremely difficult.
For Windows, you can also use the built-in reset feature mentioned above, making sure to choose "Remove files and clean the drive." For Mac computers with HDDs, use Disk Utility's erase function with Security Options set to write over the data at least once.
One pass of overwriting is generally sufficient for most purposes. The old recommendation of seven or more passes was based on outdated technology. Modern hard drives are sufficiently wiped with a single overwrite pass.
Don't Forget About Accounts and Services
Before wiping any device, make sure you've signed out of all accounts and deauthorized the device where applicable.
For computers, deauthorize iTunes or Apple Music if you've used it. Open iTunes or the Music app, go to Account, then Authorizations, then Deauthorize This Computer. You have a limited number of authorized devices, and you don't want this old computer counting against that limit.
Sign out of iCloud, Google accounts, Microsoft accounts, and any other services tied to the device. Remove the device from your account's list of trusted devices if applicable.
For phones, remove them from Find My iPhone or Find My Device before wiping. Turn off activation locks. These features are designed to prevent theft, but they can also prevent a legitimate new owner from using the device if you forget to remove them.
Physical Destruction for Sensitive Data
If your device contained extremely sensitive information, like business secrets, financial data, or anything you absolutely cannot risk being recovered, physical destruction of the storage drive is the only guarantee.
For hard drives, remove the drive from the computer and physically destroy the platters inside. Some people drill multiple holes through the drive. Others use a hammer to shatter the platters. Professional data destruction services can shred drives. Once the physical platters are destroyed, the data is truly unrecoverable.
For SSDs and phones, physical destruction is harder because the storage chips are more resilient. Professional destruction services use industrial shredders designed for electronics. For individuals, drilling through an SSD or phone in multiple places can render it unusable, but realize that fragments of chips might still be readable with advanced forensic tools. For most scenarios, proper wiping is sufficient; physical destruction is mainly for extreme cases.
Disposal and Recycling Options
Once your device is properly wiped, you have several disposal options.
Selling or donating extends the device's useful life, which is environmentally friendly. Sites like eBay, Craigslist, or Facebook Marketplace work for selling. Many charities accept used electronics. Just make sure you've completed all the wiping steps first.
Trade-in programs from manufacturers and retailers like Apple, Best Buy, and Amazon offer convenience. They often provide credit toward a new device. Their processes typically include data wiping, but it's still wise to wipe the device yourself before handing it over.
Electronics recycling programs properly dispose of devices that are too old or broken to resell. Many municipalities offer electronics recycling days. Retailers like Best Buy accept old electronics for recycling. Make sure you wipe devices before recycling, as you have no control over who handles them during the recycling process.
Never just throw electronics in the trash. Many components contain materials that are harmful to the environment if they end up in landfills. E-waste recycling ensures these materials are handled properly and that valuable metals and components are recovered for reuse.
Special Considerations
Printers and copiers with hard drives store copies of documents you've printed or scanned. If you're disposing of a multifunction printer or office copier, check if it has a hard drive. If so, wipe it using the device's built-in secure erase function (consult the manual) or remove and destroy the hard drive.
Smart home devices like smart speakers, security cameras, and home hubs should be reset to factory settings and removed from your accounts before disposal. These devices often store WiFi passwords, voice recordings, or video footage.
Wearable devices like fitness trackers and smartwatches contain health data and location history. Factory reset them and ensure they're removed from associated apps and accounts.
Document Destruction
While not a digital device, it's worth mentioning: when disposing of old documents, bills, bank statements, or anything with personal information, shred them. A crosscut shredder that cuts paper into small pieces is best. Don't just tear documents and throw them away; determined identity thieves have been known to reassemble torn documents.
Your old devices hold a digital record of your life. Treating disposal seriously, using proper wiping methods, and choosing appropriate disposal channels protects your privacy and prevents your personal information from falling into the wrong hands. Take the time to do it right, and you can move on to your new device with confidence that your old data is truly gone.
Device Disposal Checklist
- Back up data you want to keep
- Sign out of all accounts and services
- Deauthorize devices where applicable (iTunes, etc.)
- Remove SIM cards and SD cards
- Turn off Find My Device / Activation Lock
- Perform factory reset or secure wipe appropriate to device type
- Verify data has been removed (if possible)
- Remove device from account's trusted devices list
- Choose appropriate disposal: sell, donate, recycle
- For extremely sensitive data, consider physical destruction