Data Privacy Guidance before Handing over Phone for Repair

Hi Folks,
Recently dropped and broke my Redmi K20 Pro; seems like damaged display (can hear the notifications but no display whatsoever) + other internal damage(computer can't detect USB).
I am anxious to take the phone to a mobile repair technician owing to data privacy concerns. (snooping through photos, docs etc.)
I think in this case I am left with no choice but to take it to them for repairs if I really need the data back. I am unable to access my phone contents in any shape or form to perform a backup (or worst case - reset the device).

I have 2 questions -
1) Any suggestions for DIY data retrieval/removal before handing over to the technicians? [no screen/no USB]
2) How could I avoid this in the future (any tried and tested software/cloud tool for remote wipe/backup etc.)

Many Thanks!

Comments

  • +1

    To remotely wipe the data on your android device, just go to https://www.google.com/android/find?u=0, login and then click the "Erase Device" link to erase all your personal data. Any files that you didn't backup to the cloud won't be saved.

    You can also click "Secure device". This logs you out of the phone and locks the device, and hopefully the phone repair person won't be able to access your personal data. This might be a better option.

    • +1

      These measures only work if the device is connected to the internet

  • CLOUD

  • I wouldn't take it anywhere if it was unlocked.

    You can avoid it in the future by locking it.

    And if it is locked it's presumably encrypted and safe from repair people.

    • +1

      Could you please elaborate on what you mean by locking? I have a pattern lock on when the phone starts, if that's what you are asking. I don't recollect exactly, but I thought you can still see the phone drive without having to unlock your phone (might be wrong here)

  • Is the phone locked with a pin/fingerprint/pattern?

    • yes; to switch on, there's a pattern needed. And all other lock/unlocks are fingerprint driven

      • Then once they can fix it (if they do) how will they access your phone unless you give them your finger ? (or the pattern)

      • +1

        Modern android phones have FDE (full disk encryption) enabled out of the box.

        In the early days when Android phone CPU's were slow and crappy, FDE slowed your phone down considerably and you had to enable it yourself if you want to encrypt your data. https://source.android.com/security/encryption#:

        With a modern phone, as long as you were using a password / PIN to login, the data you write to your device is encrypted on the fly as you use your mobile phone.

        What this means that if someone else picked up your phone (and don't know your password), they wouldn't be able to access your data.

      • +1

        I don't think they have access to your phone storage directly without unlocking it unless theres a hack/jailbreak etc on it that they try to get around. Its different to like older computers where you can just grab the harddrive and plug it into a caddy.

        I think the files are all encrypted https://source.android.com/security/encryption/file-based

        edit.
        Just keep in mind they may ask for the pin/passcode for repair so that they can test the devices functions (see if USB still works, fingerprint screen if it has one etc). You'll probably have to tell them you'll test yourself or you'll be there when they do.

  • So you have a few Nudes….

  • USB is probably fine, if you plug it into a PC the PC won't do anything until you enable the connection on the device (which you can't do due to no screen). Maybe try installing an ADB toolkit or something to see if it can at least connect?

    I'd just get the screen fixed and take it as a lesson on backups. Odds are the repairer can't access anything without your code. You can also use the Google lock my device stuff from your Google account (I don't know how to unlock it though, probably a guide online for that).

  • If there's anything on there that you won't want in the public domain, wipe the phone before handing it over.

Login or Join to leave a comment