Security1 min read

What happens to the data on a refurbished device

Modern devices encrypt themselves, which changes what “erased” means — and what you should check on arrival.

Deleting is not erasing

Dragging files to the trash removes the reference, not the data. For years, proper disposal meant overwriting every block on the drive, sometimes several times.

Solid-state storage made that unreliable: wear levelling moves data around, so an overwrite cannot guarantee it reached every cell that once held your files.

Why encryption solved it

Current phones and laptops encrypt storage by default — FileVault on Mac, BitLocker on many Windows PCs, and file-based encryption on iOS and Android.

When a device is erased, the encryption key is destroyed. Without the key the remaining data is meaningless, which is why a modern factory reset is both faster and more thorough than the overwriting rituals it replaced.

Account locks are a separate problem

Erasing data is not the same as unlinking an account. A device still tied to its previous owner's account can be unusable to anyone else:

A reputable seller clears these before listing. It is worth confirming, because the fix usually requires the previous owner and nobody else.

What to check when a device arrives

If a device arrives with someone's files still on it, that is the clearest possible signal about how it was processed. Send it back.