Why This Matters Before Any Handover

Your smartphone holds a remarkable amount of personal information — banking credentials, private messages, health data, saved passwords, and photos. Yet most people hand their device over for repair or lending without taking any precautionary steps first.

Whether you're dropping your phone at a repair shop, lending it to a family member, or preparing to sell it, the data on that device remains accessible to whoever holds it. This checklist helps you take control of what others can see and do — without requiring any technical background. For a broader look at how your device stores and manages information, see this plain-language guide to smartphone components.

Repair Shops Can See Your Unlocked Screen

Most phone repairs do not require your phone to be unlocked — a technician typically needs only to power the device on and off. Before any repair visit, ask the shop explicitly whether they need your PIN or passcode. If access is genuinely required, use a temporary PIN and change it immediately when you collect the device. Never share your main passcode if it is used elsewhere.

Tools You'll Need

Before working through the checklist below, gather the following. Most items are simply settings already on your phone.

Required

Cloud backup service

Used to create a full backup of your photos, contacts, and app data before the handover.

Required

Your phone's Settings app

Used to change your PIN, disable biometrics, enable guest mode, and perform a factory reset.

Optional

A computer or external drive

Provides an additional local backup location for important files and photos.

Optional

Password manager (separate device)

Allows you to safely store and access your credentials from another device while your phone is away.

The Pre-Handover Checklist

Work through each group below in order. Items marked must are non-negotiable for protecting your data. Should items are strongly recommended, and nice to have items add an extra layer of protection if time allows.

Back Up Your Data

Back up photos, videos, and documents to a cloud service or your computer before doing anything else. Must
Confirm that your contacts and calendar data are synced to an account (Google, iCloud, or similar) so nothing is lost if the device is wiped. Must
Note any app data that may not back up automatically, such as chat histories in certain messaging apps. Should

Secure Your Accounts

Log out of your banking and payment apps manually, then remove any saved card details stored within those apps. Must
Sign out of your primary email account, as email often allows password resets for every other service you use. Must
Log out of social media apps that contain private messages or personal profile information. Should
Remove or log out of any password manager app so saved credentials are not accessible. Should

Adjust Access and Lock Settings

Change your unlock PIN or password to a temporary one before handing over the device, then change it back when you receive it. Must
Disable biometric unlock (fingerprint or face recognition) so the temporary PIN is the only access method. Should
Enable guest mode if your Android device supports it, which hides your personal apps and data entirely. Nice to have
On iOS, use Guided Access to lock the device to a single app if you're lending your phone for a specific purpose. Nice to have

Review and Remove Sensitive Apps

Temporarily uninstall apps that hold sensitive data — banking, health tracking, or document scanning apps — if the repair does not require them. Should
Clear saved login credentials from your browser before handing the phone over. Should
Review which apps have access to your location, microphone, or camera and revoke permissions you don't want others to trigger. Nice to have

Before Selling or Permanently Transferring

Sign out of your Apple ID or Google account from the phone's settings before performing a factory reset — failure to do so can lock the next owner out. Must
Perform a factory reset through the phone's official settings menu to erase all personal data from the device. Must
Remove any SIM card and memory card (if present) before handing the device to its new owner. Must
After the reset, verify that the phone shows the initial setup screen before completing the transfer. Should

A Factory Reset Is Not Always Enough on Older Devices

On some older Android devices, a standard factory reset may not fully erase all stored data, particularly on internal flash storage. If you are selling an older device, check whether the manufacturer provides an additional secure erase option in settings, or consult the device's support documentation for guidance on thorough data removal.

For more on controlling what each installed app can access on your device, the Smartphone Permissions Decoded guide walks through every common permission type in plain language. You may also find it useful to run a broader personal data security audit after your device is returned to you.