Avast claims that selling an old Android phone exposes all your personal data—even after a factory reset. By using forensics techniques Avast recovered the previous owner’s data from 20 wiped out used phones. Descriptions of the leftover data includes “family photos of children,” “photos of women in various stages of undress,” and “selfies of what appear to be the previous owner’s manhood” 🙂 🙂
There is a big difference between “deletion” and “secure erase.” “Secure erase,” means removing or obfuscating data past the point of practical recovery. Android has a built-in disk encryption feature.The real end game for data protection now is to physically destroy your storage. In the enterprise, that’s done via a drive crusher.
So if you want to sell your Android phone and be relatively secure, encrypting it before you wipe it or crush it :-). What about organizing old Android phones crushing parties 🙂 ?