How to Prepare Your Phone for Sale: Complete Data Security Guide for UK Sellers

By Priya Chauhan, Data Security Specialist at RecyclePro. Priya has spent six years in the mobile trade-in world. She knows GDPR and data safety inside out. Last updated: July 2026. We check this guide every few months. This page has a few affiliate links to phone buyers we like. We get a small fee if you sell through them. We only pick ones we've checked ourselves.

Say you're selling your old phone online. A buyer messages you. "Will you still have access to my Apple ID after I buy it?" You freeze.

You hadn't even thought about that.

This happens to loads of people. Learning how to prepare your phone for sale isn't just wiping a few photos off it. It's phone data security before selling, done right. It's about looking after the buyer too. And it's about getting a fair price. Think of this whole page as a complete data security guide phone sale UK sellers can actually follow, start to finish.

Skip a step here, and three things can go wrong. First, your privacy takes a hit. Old data left on a phone is a real GDPR problem, not just a small worry. Second, your wallet takes a hit. A phone still locked to your old account is often worth nothing to a buyer. Third, your peace of mind takes a hit. If you can't prove you did things right, and a buyer complains later, you've got nothing to fall back on.

This guide walks you through every step, in the right order. It tells you why each step matters, too. Think of it as your phone preparation checklist before selling, whether you're going private, using eBay, using Facebook Marketplace, or trading in with someone like RecyclePro.

Learning how to sell a phone safely UK-wide really just means doing the same handful of things, every time. Keep your data safe. Keep your resale value high. That's it.

What's Actually on Your Phone? Know Your Risks First

Before you delete a thing, it helps to know what you're dealing with. Good phone resale preparation always starts here, and getting phone data security right means knowing your risks first. Your phone holds way more personal stuff than most people think.

The risky stuff: Your banking apps store login info, sometimes even saved cards. Your email and cloud accounts hold years of messages and photos. Apps like Google Authenticator hold your two-step codes. Even your saved WiFi passwords sit quietly in your settings.

The medium-risk stuff: Think passport photos, driving licence scans, your location history. Your photos carry hidden location data, even ones that look harmless. Your old chats on WhatsApp count here as well.

The low-risk stuff: Your app list. Your browsing history. Basic settings. Not a huge deal on their own, but they still say a lot about you.

One thing worth a quick mention: password managers. If you use one, check it separately before you wipe anything. Most sync to the cloud on their own. Still, open the app on your new phone first. Make sure your saved logins are actually there before you erase the old device.

Ofcom's own research on UK phone habits shows most people now hang on to a phone for two to three years before selling it. That's worth knowing, since it means most sellers reading this guide are likely holding a phone that's still worth real money, not one that's ancient and barely sellable.

Can someone actually get your data back after a reset? In theory, yes. But only with special tools most people simply don't have. It takes real skill, proper software, and often a full lab setup. A normal buyer has none of that.

The risk from a casual buyer? Very low. From a determined criminal? A bit higher, but still small once you've signed out properly first. Government-level hackers could do more, sure, but they're not exactly showing up to buy your old phone off Gumtree.

There's a data safety standard called NIST SP 800-88 that covers this stuff. It splits data removal into three levels. Basic wiping. Deep wiping. Full physical destruction. For a normal phone sale, basic factory reset does the job just fine.

Here's something worth knowing too. The longer a phone sits with a new owner, the harder any data recovery gets. New files write over old ones. Within a few weeks of normal use, most basic recovery attempts would come back with nothing anyway.

Now, your legal side. Under UK GDPR, there's something called the Right to Erasure. This makes deleting your data on you once you're done using it. Selling your phone counts as exactly that moment.

The law just asks for "reasonable steps." The UK's Information Commissioner's Office, or ICO, ensures a proper factory reset, done after you've signed out. This is basically what GDPR compliant phone data deletion looks like for a regular person, not a big company.

You won't be fined personally if something slips through, unlike a business would. But doing it properly is how you avoid a data breach when selling phones, situations that could otherwise leave you red-faced.

The ICO's own advice backs this up too. They want sensible steps, not perfection. A proper reset, done in order, ticks that box. Want the full legal picture? Check our guide on GDPR and your rights as a seller.

Quick word on fingerprints and face scans. These never get stored as actual images anywhere on your phone. Apple keeps this stuff in something called a secure enclave. It's a separate little chip. A factory reset wipes it clean. Android does something similar. Either way, a proper reset takes care of this automatically; no extra step needed.

Your Pre-Sale Checklist: Do This Before You Delete Anything

Do this bit first, before you touch a single account setting. This is step one in any decent phone selling guide UK sellers should follow. Want a version you can tick off as you go? We've put together a printable checklist you can download and keep next to you while you work through these steps.

1. Write down your exact phone model and storage size. iPhone: Settings, then General, then About. Android: Settings, then About Phone. This is really step one to delete all data from your phone before selling the right way. Different models sign out in slightly different ways. Storage size affects what you can sell it for.

2. Take photos of your phone's condition. Front, back, edges, a close shot of the screen. This protects you if a buyer later claims damage that just wasn't there.

3. Write down your IMEI, but keep it private for now. Dial *#06# and jot the 15-digit number somewhere safe, like a locked note. This number proves your phone's real. But posting the full thing in a listing lets scammers block your phone before you've even handed it over. Only share it once you've been paid.

4. Check your new phone's actually ready, if you're upgrading. Photos moved over? Contacts there? Can you log into your bank app? You can't undo a factory reset, so double-check this before anything else.

A quick look at backup options:

One rule beats all the rest: check your backup actually worked on your new phone before you wipe the old one. Don't skip this bit.

Move your authenticator apps first. Apps like Google Authenticator don't back themselves up. Wipe your phone without moving these first, and you lose your two-step codes for good. Most apps let you export a QR code instead. Some even have a "move to new phone" button built in. Do this before you reset, never after.

Unpair anything linked to your phone. A smartwatch, earbuds, even your car. These can survive a reset and quietly give your new owner access. Head into Bluetooth settings and forget each one.

Signing Out: The Step Most People Mess Up

This is where most sellers slip up. Get this wrong, and it can seriously hurt what you get for your phone. Getting this bit right is really what a secure phone sale UK guide should be about.

Here's the golden rule: sign out first, reset second, never the other way round. Reset first, and your phone locks itself. That means Activation Lock on iPhone, or Factory Reset Protection on Android. Your buyer then can't set the phone up at all without your login. This one mistake alone can knock 20-50% off your offer. Fixing it means signing in remotely later, which consumes time and often needs extra checks.

Apple's own support pages confirm this exact order too, as do Google's and Samsung's help centres for their phones. All three make the same point in their own words: sign out before you reset, or the phone stays locked to you.

Why does the order matter so much, really? Your accounts and your phone's security are stacked on top of each other, a bit like layers. Your Apple ID or Google account sits at the very top layer. Underneath that sits your phone's anti-theft lock, checking that the top layer is genuinely you before it lets go. Reset the bottom layer first, and the top layer never gets its chance to confirm you're really you, so it just locks everything down out of caution. Sign out first, and you're removing that top layer cleanly, so the reset underneath has nothing left to protect.

If You've Got an iPhone

Go to Settings. Tap your name at the top. Hit Sign Out. Type your password when asked. You can keep a copy of your contacts on the phone if you want; that bit's optional. This step is what removes Activation Lock.

Once you're signed out, go back into Settings. It should now say "Sign in to your iPhone" instead of showing your name. Check that Find My iPhone is off too, under Settings, then Privacy, then Location Services.

Got an iPhone 15 or newer with Stolen Device Protection turned on? You might see something called a Security Delay, around an hour long. You'll get two separate face or fingerprint checks too. This isn't a glitch; it's meant to happen. Just wait it out, or switch off your screen lock first before signing out.

After you're signed out, pull any saved cards from Settings, then Wallet & Apple Pay. Double-check Messages doesn't show your Apple ID. Last step: visit appleid.apple.com from another device, and remove this phone from your trusted devices list.

If You've Got an Android Phone

Every Android phone needs its Google account removed first. Settings, then Accounts, pick your Google account, remove it. Skip this, and Factory Reset Protection will lock the whole phone down.

Samsung phones need one more step. Remove your Samsung account too, under Settings, then Accounts. Then head to Lock Screen & Security and turn off Find My Mobile.

If you use Samsung's SmartThings app to control other gadgets around your home, like plugs or lights, unlink your phone from that too before you reset. It's easy to forget, since it doesn't feel connected to your phone's own security, but it's tied to your Samsung account just like everything else, so it's worth a quick check on the same pass.

Google Pixel phones need Find My Device switched off. You'll find it under Settings, then Security & Privacy.

OnePlus, OPPO, and similar brands often run their own account on top of your Google one. Check for both. Remove both. Look for a brand-specific anti-theft switch in security settings too, and flip that off.

Whatever brand you've got, get rid of your payment apps, like Google Pay or Samsung Pay. Uninstall them or clear their saved card info by yourself. Switch off Find My Device too, so your email doesn't show up on the setup screen for the next person.

A Few Snags People Hit

Forgotten your password? iPhone: head to appleid.apple.com and reset it using your recovery email. Android: same idea, through accounts.google.com. You don't need your old password just to sign out. You only need it if you're properly locked out.

Stolen Device Protection blocking you? Turn off your passcode for a minute under Settings, then Face ID & Passcode. Sign out without the usual delay. Turn your passcode back on after, if you like.

Authenticator app still asking for codes even after signing out? That's normal. The app doesn't care about your account sign-out. It'll keep working until you either delete it or move the codes yourself. So don't delete it until you've moved everything across.

Want steps just for your device? Check our full guides on preparing an iPhone for sale, preparing a Samsung Galaxy for sale, and preparing a Google Pixel for sale.

Got an older iPhone? Working out how to prepare an iPhone 13 for sale follows the same steps as any other iPhone. Just check your software version first. Older versions sometimes hide these settings in slightly different spots. Check Settings, then General, then Software Update, and update first if you're a few versions behind.

Pixel owners, one more thing. Google's own anti-theft feature works a lot like Apple's Activation Lock. Same rule applies: sign out first, reset after, never flip that order.

Taking Out Your SIM, eSIM, and Memory Card

Physical SIM cards are easy. Use the little tool from your phone's box, or a straightened paperclip. Find the tiny hole on the side of your phone, push it in, and the tray pops out.

One thing that trips people up: pulling out your SIM doesn't cancel your contract. Your network keeps billing you until you actually ring them and cancel. Do that separately if you want the payments to stop.

eSIMs are trickier. The process changes depending on your network.

• Vodafone: Manage Account then SIM Settings, remove the eSIM. Or call 191 to double-check it's gone.
• EE: Use SIM Management in your account, or call 150. Make it clear you're removing it, not moving it.
• Three: Account, then SIM Swap, request removal. Or call 333. Three's system can switch itself back on if the same number gets scanned elsewhere, so tell them in advance.
• O2: Manage Account, then Devices, remove it there. Or just pop into a store.

The general route works the same everywhere. Settings, then Mobile or Cellular, your carrier's name, then Remove eSIM. After that, call your provider to check it's really gone. Sometimes an eSIM stays active on their side, even after you've removed it on your phone. A screenshot of your account showing it as inactive is good proof to keep.

Keeping your number for your new phone? Sort your porting code with your provider before you touch the old eSIM. This usually takes one to three working days.

Memory cards on Android phones store your photos separately from the phone's built-in storage. A factory reset won't touch these on its own. Pop the card out, then go to Settings, then Storage, or take it out by hand. Keep it, or wipe it clean on a computer first if you want to include it with the sale.

Got a phone with two SIM slots? Some Android phones, especially certain imported models, take two physical SIMs at once. Check both trays carefully, since it's easy to miss the second one tucked underneath the first. Some dual-SIM phones also mix a physical SIM slot with an eSIM, so you may need to handle both types on the very same device before you're properly done.

Check Your Backup Actually Worked

Don't factory reset until you've properly checked everything made it across. Data erasure before selling the phone should happen after this step, never before.

This is where most people's biggest regret comes from. They wipe the old phone. Then they find out the backup never actually finished.

Start with your photos and videos. Open Photos on your new phone. Scroll back through your timeline. Are your older pictures actually there? Check contacts and calendar next. Missing anything? Go back into your account settings and force a manual sync.

Messages need their own check too. iPhone messages usually come back on their own from an iCloud backup. WhatsApp is different, though. You need to run its own restore feature by hand. If chats don't transfer cleanly, WhatsApp lets you export a chat as a file first, then bring it back in later.

Open your authenticator app on the new phone. Check your codes for important stuff, like Gmail or your bank, are actually there and working. If you miss one, add it back manually by scanning the original QR code again.

Last thing: log into your banking apps on the new phone. Make sure they work. Check your cloud storage apps show your important files too.

Still missing something? Plug your old phone into a computer with a cable. Copy across whatever didn't make it, before doing anything else. Cloud backups often finish overnight rather than right away, so give it a full day, then check again, before you commit to that factory reset.

Doing the Factory Reset Properly

This step only happens once everything above is sorted. Working out how to wipe phone before selling, and how to factory reset phone before sale, both come down to one thing: order. Sign out. Check your backup. Pull the SIM and memory card. Unpair your devices. The order really does matter here.

Before you hit reset, check off this list:

• Accounts signed out. Apple ID, Google, Samsung, or your brand's account.
• Backup double-checked on your new phone.
• SIM or eSIM removed.
• Memory card taken out, if you had one.
• Watches, earbuds, anything else, unpaired.
• Cards removed from your digital wallets.

Resetting an iPhone. Settings, then General, then Transfer or Reset iPhone. Choose Erase All Content and Settings. You'll type your Apple ID password one last time. This takes about 5 to 15 minutes, depending on your storage.

Resetting Android. For most phones. Go to  Settings, then System, then Reset Options, then Erase All Data. For Samsung: Go to Settings, then General Management, then Reset. And for OnePlus and OPPO: Go to Settings. After that, go to System Settings, then Reset. Whatever the brand, it takes around 10 to 20 minutes.

Once it's done, your phone boots up to a setup screen. Don't go through that setup yourself; that part's for whoever buys it. Turn the phone off. Take a screenshot of that setup screen first, as your proof that everything worked.

Is a factory reset actually enough on its own? For most private sales, yes. Factory resetting the phone before selling is really the heart of this whole guide. It clears the visible files and wipes your accounts, which is exactly what GDPR's "reasonable steps" rule expects from a regular person.

Certified secure erase goes a step further. It follows standards like NIST or DoD 5220.22-M, and writes over your storage several times. This is really made for businesses handling loads of devices, or very sensitive data, not for one phone sale. Don't want to think about any of this? Trade your phone in with someone like RecyclePro instead. They handle the certified wipe and give you a certificate as proof.

Check the Setup Screen and Keep Your Proof

That setup screen right after a reset is your best proof that everything worked. Screenshot it. You might need it later.

On iPhone, it should just say "Hello," with a language option, and nothing linking it back to you. On Android, you'll see a "Welcome" screen, or the phone maker's own logo, again with zero trace of your old account.

Watch out for these red flags. Stop right away if you spot them. Your Apple ID or email showing up on the setup screen. Any mention of Activation Lock. A message saying the phone is "managed by" your old account. If you're seeing any of this? Go back through the sign-out steps again before anything else.

Take three screenshots of the clean setup screen. The phone switched off. Your IMEI (dial *#06# again), with a timestamp visible somewhere. Keep these safe, maybe in a cloud folder with the date in the file name.

Be honest with yourself about your phone's actual condition too. It affects your price. It affects how believable your listing looks.

Selling privately? Put together a simple proof-of-sale record too. Buyer's name and contact details. The price you agreed on and how they paid. The phone's model and part of the IMEI. What condition you both agreed on. Confirmation from the buyer that they got the phone on a clean setup screen. Get both of you to sign it, even informally. It protects you both if a dispute pops up later, and gives you a real defence if anyone ever questions whether you erased your data properly. Buying a used phone yourself one day? Our guide on how to buy a secure used phone covers what to look for from the other side.

Private Sale or Trade-In? Pick Your Path

Both get your phone sold in the end. If you're trying to prepare your phone for resale the smart way, it really comes down to effort versus reward. The risk levels differ too.

Mobile phone resale in the UK mostly splits into these two camps. Whichever you pick, secure phone erasure before resale is the one step neither route lets you skip.

Private sale, through eBay, Facebook Marketplace, Gumtree, or Vinted, gets you the most cash. No middleman taking a cut. You set the price and the terms. The trade-off? You carry all the risk. Payment scams, buyer disputes, and full responsibility for proving your data's actually gone.

Trade-in services like RecyclePro, MusicMagpie, Envirofone, or Mazuma take that weight off you. They do a certified wipe, hand you a certificate, and pay you fast, usually with zero scam risk on their end. You'll get a bit less cash, and the final offer depends on their check once the phone lands with them, but for a lot of sellers, having to do less hassle is worth the trade.

A spokesperson from one major UK trade-in service put it simply: their wiping process runs to the same standard used by data destruction firms, not just a basic phone reset. That's the kind of thing worth asking about if you go this route. A proper trade-in service should be happy to explain exactly how they wipe a device, not just say "don't worry, we'll sort it."

Want top cash and don't mind chatting with buyers and taking photos yourself? Go private. Want something fast, guaranteed, and low-effort? Especially if you're not totally sure about doing the data-wiping bit yourself, trade-in's the safer call. A good middle ground: get a quote from both. If the private price is a lot higher, try that first. Fall back to trade-in if nothing sells after a couple of weeks.

A word on each platform. On eBay, describe your phone honestly, using their grading scale. Their Buyer Protection tends to favour buyers in case any dispute takes place. On Facebook Marketplace or Gumtree, meeting in person is smart so the buyer sees that clean setup screen themselves. On Vinted, the platform holds the payment until the buyer confirms that the phone showed up in good shape. That protects everyone involved.

Meeting Your Buyer Safely and Getting Paid Properly

Selling privately? A bit of caution around the handover goes a long way.

Before you meet up, check the buyer's number actually matches their profile. Watch out for anyone pushing to meet right away, or offering extra cash to skip the usual back-and-forth. Agree the price, how they're paying, and the condition in writing beforehand. Use the platform's own messages for this, not a private number.

Pick your meeting spot with care. Busy public places with cameras, such as a shopping centre, work well. Loads of UK police stations now have "safe exchange zones" made for exactly this kind of thing. Search for your local station online to check.

Whether it's a sell phone London meet-up, a used phone sale Manchester exchange, or a secure phone resale Birmingham handover, the same rule holds everywhere in the UK: somewhere public, well-lit, with cameras around. Skip anywhere quiet. Skip a buyer's home too, since there's no one else around if things go wrong.

UK police have flagged online marketplace fraud as a real, growing problem, especially with pricier electronics like phones. Their advice matches this guide closely. Check who you're meeting. Pick somewhere public. Never hand anything over before the money's actually cleared.

On the day, bring ID, your phone fully charged and sitting on that clean setup screen, and your proof-of-sale form. Let the buyer check the phone properly. Make sure the payment's actually landed in your account before you hand anything over. Don't accept a "pending" screenshot as proof. Get them to sign your form. A quick photo of them holding the phone with the signed paper is a handy extra backup, if you're comfortable with that.

A few scams worth knowing about: an overpayment scam, a buyer sends too much on purpose and asks you to wire back the difference. Their original payment then bounces days later, and you're the one out of pocket. Never send anything back until the first payment has fully cleared, usually three to five working days. With PayPal's goods and services option, a buyer can sometimes claim a refund after they've got the phone, saying it wasn't as described. A plain bank transfer carries less of that risk. And never hand over your full IMEI until you've been paid, since a scammer with that number could block the phone and claim it was stolen. Want more on safe payment methods? See our guide on bank transfer versus PayPal safety.

Quick Answers to Common Questions

Is a factory reset enough to wipe everything?

For most private sales, yes. A factory reset clears the visible files and wipes your accounts. That's exactly what GDPR calls "reasonable steps." Dealing with really sensitive data, or just want extra peace of mind? A certified wipe, or a trade-in service that gives you a certificate, goes a step further.

Can someone actually get my data back after a reset?

Only in theory, and only with special forensic tools most buyers simply don't have. The real risk to you is low once you've signed out properly first. Still not sure? A trade-in service with a certified wipe removes that worry completely.

What happens if I reset before signing out?

Your phone locks itself: activation Lock on iPhone, Factory Reset Protection on Android. The new owner can't set it up at all without your login. That makes it basically worthless to them. This is the single most common mistake sellers make. You can fix it, but only by signing back in remotely, which eats time and often needs extra checks.

Should I cancel my contract before selling?

Ejecting your SIM or eSIM doesn't cancel your contract in itself. Your network keeps charging you until you actually call and cancel, or your contract ends naturally. Keeping your number for a new phone? Port it across first before touching the old eSIM.

How do I safely meet a Facebook or Gumtree buyer?

Pick somewhere busy, public, with cameras, like a shopping centre. Or check if your local police station has a safe exchange zone. Bring ID and your phone on that clean setup screen. Only accept a bank transfer once it's actually cleared, never a "pending" screenshot.

What's an IMEI, and should I hand it over?

It's your phone's unique 15-digit number. Don't post the full thing in a public listing; scammers can use it to block a phone before you've even handed it over. Share the last four digits for proof it's real, and give over the full number only once you've been paid.

What's Activation Lock, and why does it matter?

It's Apple's anti-theft feature, tying your phone to your Apple ID. Reset without signing out first, and it stays active. The new owner can't set it up at all. This is exactly why the order matters so much. Double-check before you ever hit reset.

Do I need a certificate of erasure for a private sale?

Not strictly, no. Want documented proof your data's actually gone? Most trade-in services hand you one automatically. It's a nice extra for your own peace of mind, not a legal must for private sellers.

Can a buyer get into my banking apps after buying my phone?

Not if you've signed out properly first. Banking apps need their own login regardless, so even if the app's still on there, a buyer can't get in without your details. Still, it's good practice to remove banking apps completely before handover, not just sign out of them.

What if I've forgotten my Apple ID password?

Head to iforgot.apple.com and reset it using your recovery email or number. You don't need your old password just to sign out of a phone you already hold. You only need it if you're actually locked out.

How long does a factory reset take?

Usually 10 to 20 minutes, depending on your storage size. Let it run all the way through; don't interrupt it. Once it's done, your phone boots straight to the setup screen on its own.3

Is it safe to sell to a stranger online?

Generally, yes, as long as you're sensible about it. Stick to trusted platforms. Check what you can about the buyer. Meet somewhere public. Use a bank transfer over cash where you can. Millions of these sales go smoothly across the UK every year. Something feels off about a buyer? A trade-in service is always the safer, lower-risk choice.

New or Refurbished? A Quick Word on Safety Either Way

Selling your old phone usually means buying a new one, or maybe a refurbished one. Worth knowing the safety picture looks a bit different on that side too.

A brand-new phone has no history at all, so nothing to worry about there. A refurbished phone from a proper UK seller should also come fully wiped, often with its own certificate to prove it. The real risk is with unverified sellers on general marketplaces. You just can't always be sure the last owner's data actually got removed.

Buying refurbished? Stick to known UK sellers. Look for ones who explain their wiping process clearly. A quick check of the listing, or a direct question to the seller, tells you plenty. Can't get a straight answer about how they wiped it? Take that as a warning sign.

You're Ready to Sell With Confidence

You've worked through everything, in the right order. Back up. Sign out. Pull the SIM. Factory reset. Check that setup screen. This really is the best way to wipe phone data before selling, whether it's one iPhone, one Android, or a whole pile of them for a business doing used smartphone selling.

Your data's gone. Your privacy's sorted. And you've got proof to back it up if anyone ever asks.

One last thing worth saying. None of this needs to feel scary or complicated once you've done it once. The first time through, it might take you half an hour working carefully through each section. The second time you sell a phone, most of this becomes second nature, and you'll fly through it in ten minutes flat.

Knowing what to do before selling a phone UK-wide really just comes down to this order, every single time. Secure phone erasure only works when the steps are completed in sequence, not jumbled up or skipped.

Leaning toward a private sale? Compare listings across eBay, Gumtree, and Facebook Marketplace to see where your phone might do best. Want speed and less hassle instead? Get an instant quote from a trade-in service like RecyclePro and have it all wrapped up in days. If you still have a question nagging at you? The FAQ above probably covers it.

Selling an old phone is good for your wallet, and good for the planet too. Follow these steps, in order, and you'll walk away with a fair price, and your data staying exactly where it belongs.

Whatever route you choose, from here on, remember this. Every phone you sell properly, following this order, is one less device that leaks personal data into the wrong hands. That's not a small thing. It's exactly why guides like this one exist, and it's why taking the extra fifteen minutes really is worth it every time.