3.5 Data Lifecycle and Disposal

Core Concept: Protect Your Data

Data doesn't just disappear when you delete it. When you click "delete" or throw a device in the trash, your personal information often remains completely recoverable. This section covers how to properly manage data throughout its entire lifecycle, from creation to destruction.

Whether you're selling an old phone, donating a computer, recycling a hard drive, or just trying to clean up years of accumulated digital clutter, you need to know how to truly delete data so it can't come back to haunt you.

3.5.1 Understanding Data Lifecycle and Deletion

Delete doesn’t mean “gone.” When you delete a file, your computer doesn't actually erase it, it just marks that space as "available for reuse." The data sits there, completely intact, until something else overwrites it. This might take days, months, or never happen at all.

Where your data lives:

• Active files: Documents, photos, videos you're currently using

• Trash/Recycle Bin: Deleted files waiting to be permanently removed

• Free space: Deleted files not yet overwritten, recoverable with tools

• Backups: Local and cloud backups (Time Machine, iCloud, Google Drive)

• Cloud services: Email, cloud storage, social media

• Device caches: Temporary files, thumbnails, previews

• Other devices: Printers, copiers, phones, tablets

Real-world consequences of improper disposal:

• Identity theft from recovered tax returns and financial documents

• Private photos recovered from donated computers

• Medical records from hospital equipment

• Passwords and login credentials from old phones

3.5.2. The Basics

• Factory reset devices before selling or donating

• Delete old online accounts

• Delete cloud data you don’t need

Factory Reset Before Selling or Donating Devices

Never sell, donate, or recycle a device without factory resetting it.

Before factory reset:

• Back up any data you want to keep (see Backups section)

• Sign out of all accounts (iCloud, Google Drive, Microsoft OneDrive, etc.)

  • Right click icon on system tray (the icons around your clock)

  • Go to settings, or open and from the main window look for a way to log out (exit only closes the program on your computer, it does not sign you out)

• Deauthorize device from all services (iTunes, Adobe, etc.)

  • Log into account through their website and view authorized devices; remove the device from the list

• Remove active logins from all accounts (social media, email, etc)

  • Log into each service and view active devices; remove the device from the list

• Remove device from Find My Device (see Mobile Device Hardening topic)

• Remove SIM card and memory cards

How to factory reset:

iPhone/iPad:

• Settings > General > Transfer or Reset iPhone > Erase All Content and Settings

• Enter passcode and Apple ID password

• Confirm erasure

Android:

• Settings > System > Reset > Factory data reset

• Confirm and enter PIN/password

Windows:

• Settings > System > Recovery > Reset this PC

• Choose "Remove everything"

• Choose "Local reinstall" or "Cloud download"

• Additional settings > "Clean data" (more secure but slower)

Mac:

• Sign out of iCloud: System Settings > Apple ID > Sign Out

• Restart and hold Command+R to enter Recovery Mode

• Disk Utility > Erase main drive (choose APFS or Mac OS Extended)

• Reinstall macOS

Delete Old Online Accounts

Old accounts you no longer use still contain your personal data.

Some accounts to review include:

• Old social media profiles

• Shopping sites you no longer use

• Gaming services

• Forums and community sites

• Old email accounts

Before deleting account:

• Download any data you want to keep

• Cancel any subscriptions or payment methods

If you’re not sure how to delete an account (service provider instructions are not always clear) you can look up the site here: https://justdeleteme.xyz/ 

Delete Cloud Data You Don't Need

Data in the cloud doesn't necessarily automatically delete when you delete it locally. Review your cloud data storage occasionally and remove any sensitive information to limit its exposure. Don’t forget to empty the trash, as cloud services often retain deleted items for 30+ days.

3.5.3. Better Protection

• Use secure deletion tools

• Check printers and copiers

Use Secure Deletion Tools

When disposing of a computer, if you have used it to store sensitive files, normal deletion isn't enough. Secure deletion tools overwrite the data multiple times.

Recommended tools:

• DBAN: https://dban.org/ - Free, boots from USB, wipes entire drive (DBAN only works with traditional hard drives (HDDs), not SSDs)

• Parted Magic: https://partedmagic.com/ - Paid, includes secure erase for SSDs

• Manufacturer tools: Many SSD makers provide secure erase tools

DoD 5220.22-M standard: Overwrites data 7 times (for HDDs). Once considered necessary, now overkill; 1-3 passes is sufficient for HDDs. For SSDs, multiple overwrites are ineffective due to wear-leveling; use manufacturer's Secure Erase utility or ensure the drive was encrypted from the beginning.

Check Printers and Copiers

Many printers and copiers have internal storage that keeps copies of things you printed or scanned.

Before disposing:

• Check manual for how to clear memory/storage

• Many have "Clear All Settings" or "Factory Reset" option

• For office copiers with hard drives, remove and destroy the drive

3.5.4. Extra Credit

Plan for Digital Legacy

What happens to your data when you die? Plan for it.

Digital legacy planning:

• List all important accounts and where passwords are stored

• Designate trusted person to handle digital affairs

• Use your password manager's emergency access feature

• Set up legacy contacts on Google, Apple accounts

• Include digital assets in will

Services:

• Google Inactive Account Manager - Auto-delete or share after inactivity

• Apple Legacy Contact - Designate someone to access your Apple account

• Facebook Legacy Contact - Memorialize or delete account