If you are a regular here on Ghacks you know that one needs to be careful when it comes to giving away or selling old devices that were used for storage (read used hard drives still haven for identity theft from 2008 for example)
This can be an external hard drive, an old PC or laptop, or a smartphone. As long as there is permanent storage, there is the chance that data may be recovered even if you have deleted it or used a reset option to restore a factory state.
The reason why is simple: deleting files does not really remove the files from the storage device, it only deletes the pointer to it. The occupied storage space gets overwritten with use eventually which is the reason why the chance of data recovery drops with age.
Avast ran an experiment recently that came to alarming results. Well, if you are a reader here you know what is coming. The company bought 20 used Android smartphones on eBay and used file recovery software to restore deleted data on those phones.
The result? More than 40,000 photos of which 1500 were of families and children, 750 of woman undressing or naked, and 250 of men photographing their manhood.
In addition, Avast was able to recover 750 emails and text messages, 1000 Google searches, four identities, a completed loan application and more than 250 contact names and email addresses.
What you do about it
The best defense against the attack form is to keep your devices or destroy them properly instead of giving them away or selling them.
This may however not always be possible, and the next best option after that is to use secure deletion software or apps.
- Avast Anti-Theft supports a wipe feature that can erase the phone's memory so that it cannot be recovered by data recovery software.
- Secure Deletion for Android (€2.20) makes sure that deleted data is erased in a way on the phone that it cannot be stored anymore.
- Secure Erase with iShredder 3 supports several file overwrite algorithms to delete files so that they cannot be recovered.
- Secure Wipe will overwrite free space to make any deleted data un-restorable.
- iShredder is also available for iOS.
- According to some sources, selecting Settings > General > Reset > Erase all Content and Settings is enough on iOS to securely delete all data.
You may want to test how well the wiping went. This usually comes down to connecting the device to a computer, enabling USB debugging, and running data recovery on the computer on the connected storage cards of the mobile device.