How to Delete Health and Fitness Data Before Selling a Phone

An old phone is pretty painless to sell - list it, ship it, done. What usually gets missed is that years of very personal data are still sitting right there on the device. Heart rate logs, sleep patterns, menstrual cycles, weight history, GPS routes from your morning runs - health apps store this without much attention from anyone, and the average seller doesn’t give it a second thought until the phone has already left their hands.

When sellers rush to list a device and get paid for it, privacy usually gets pushed to the very bottom of the to-do list. A factory reset seems like more than enough to stop right there - which is a pretty understandable place to land given how final a full reset sounds. The catch is that health data doesn’t always disappear the same way other files do - it can sit around in cloud backups, stay dormant in connected accounts and persist in third-party apps that you never even touched during the wipe.

Of the data on your phone, health information is probably the most sensitive category by a long shot. A leaked health record can put your insurance eligibility at risk, slowly damage your reputation and cause a series of problems that are very hard to undo once they get going. We’re talking about very personal details here - the kind that were never meant for anyone else’s eyes, let alone a stranger who bought your old phone off some online listing.

A few extra minutes of careful data removal before you sell is worth every second, given what’s actually at stake. Years of personal history, medical records and location data deserve more care than a quick factory reset and a label stuck on a box. Most guides barely touch on it - which is a shame, because it might just be the biggest part of the whole process.

Let’s get started on how to safely wipe your health data before you sell.

Your Health Data Can Do Real Damage

Over time, data from health and fitness apps slowly builds into a detailed profile of your body, your routines and even your physical movements - the routes you run, the parks you walk in, the neighborhoods you pass through week after week.

Most of this data gets skipped over without a second thought. A phone can hold months’ (even years’) worth of records on details like menstrual cycles, sleep patterns, heart rate and weight changes. A contact list gives away your name and number - it feels personal enough on its own. Health data like this goes quite a bit deeper than that, though.

Health information can do actual damage when it ends up in the wrong hands - it’s not an overstatement. Medical records that have leaked out have cost employees their jobs, damaged their insurance coverage and put strain on personal relationships. Once that information is out in the world, there’s no easy way to pull it back. At a minimum, treat it as closely as you would treat your bank account info or your passwords - maybe even more so.

The problem is that apps do this in the background, over a pretty long stretch of time. No alerts, no reminders - just a silent accumulation. An app that you installed years ago and forgot about is still sitting on your device and it still has every data point it ever recorded. Little by little, that adds up into a pretty full record of your health history.

With data that builds up this slowly over time, most of us have no idea how much has accumulated until we actually go looking - and in my experience, that realization tends to hit hard. A scheduled audit of the health and fitness apps on your phone is worth putting on your to-do list - go through what permissions each app has, what it’s been storing and whether you even still use it. Plenty of these apps also pass your data along to third parties, and their privacy policies are written in a way that makes it pretty easy to miss.

What a Factory Reset Still Leaves Behind

A factory reset is usually the first answer everyone reaches for. One button press and the phone gets wiped clean, or at least that’s what most of us expect. It’s an easy assumption to make, because the reset does manage most of what’s on the device.

What actually happens is a bit messier. A reset does wipe the surface of the phone - it just doesn’t always reach everything underneath it. Health and fitness apps, say, will usually store their data in cloud accounts that are separate from the device itself. After a reset, that data stays right where it was. Untouched. Still right there in those external accounts.

A new owner could access those leftover accounts if the sign-out steps were skipped before the handoff, and it’s a genuine concern. A team at Avast famously pulled thousands of photos, emails and personal info off factory-reset Android phones that had been sold on eBay, and health data in those linked accounts can run into very similar exposure. The data stored there (workout history, heart rate, sleep data) can be fairly personal.

Cloud accounts are the biggest gap in this whole process. The app gets removed from your device during a reset. But your account stays right there - personal information and all. It’s my least favorite part to explain, because two separate steps are needed when one of them should be enough on its own.

Delete Your App Data and Cut Off Access

The first step is to open your health app and delete your data by hand. A factory reset will wipe your device’s user data and apps. But it doesn’t always reach far enough down into the app storage. Health data has a tendency to sit in little pockets that a reset will never get to.

Pull up whatever app you use to track your health (Apple Health, Google Fit, Samsung Health, take your pick) and look for an option to delete your personal data directly from within the app. Most of these apps will bury it somewhere deep in the settings menu and it might take a few extra taps to hunt it down. It’s worth the extra minute, though. Any data that you delete manually from the app is data that’s gone.

What tends to fly under the radar for plenty of health tracker users is the web of third-party apps that are still connected to their main device. An old app like MyFitnessPal, Fitbit, or that sleep tracker that you downloaded a couple of years ago could still have an active data connection in the background.

Smaller fitness and wellness apps are worth a look here. Even an app that you downloaded, used twice, and forgot about can still pull and sync your data months or years later. Go through your full list of connected apps and ask yourself whether you remember each one. If the answer is no, or just a hazy “maybe,” go ahead and cut it off. Even better, take a minute to find out how to delete your personal data with that service altogether, because a cut data link and a closed account are actually two very different things.

Delete Your Apple Health Data the Right Way

iPhone users will have a few extra steps to work through here, and it’s worth the effort to get it right. Apple stores health data in more than one place, so deleting the app alone won’t wipe everything clean.

Open the Health app and tap your profile picture in the top corner. From there, look under the “Apps and Services” and “Devices” sections to get a full list of everything connected to your Apple Health profile - every linked device, every third-party app that’s had any access to your data. That’s where you can remove anything that has been reading or writing your health information. Do this part first, before anything else, because the order here actually does matter.

To wipe your Health app data, disconnect your linked devices first. Skip that step, and pieces of your information can hang around inside connected apps or synced services. Your data won’t be fully gone until every connected source has been cut off.

After the connected devices are removed, go back into the Health app to delete your stored data. Apple has a built-in option that wipes your Health data - it’s the last step in the whole process. The menus are a few layers deep, so if you don’t spend much time in your phone’s settings, it can be a little hard to find - just work through it one screen at a time and you’ll get right to it.

One more point on the timing side - this whole process won’t take long at all. A couple of minutes of patience at the start is well worth it, because the alternative leaves you with no actual idea of whether your data was removed or just partially cleaned.

With all that handled, the next step is to sign out of your accounts. That applies to every phone, whatever kind you have.

Log Out of All Your Accounts First

One step sellers skip before a factory reset is to sign out of all their accounts on the phone first. That means your Apple ID or your Google account, your Samsung account if you have one set up and any fitness apps that are still logged in - Strava, MyFitnessPal or anything else along those lines.

Two problems can arise if that gets skipped. The new owner could be left with a phone that’s still locked to your account, which turns an otherwise fine device into a very expensive paperweight. And your synced data might hang around in places that are easy to miss - still linked to your profile somewhere in the background, long after the phone has left your hands.

Think about it from the buyer’s side - a locked phone is an immediate source of frustration and a frustrated buyer usually means refund requests and a string of follow-up messages that no one has time for. A smooth handoff really starts well before the phone ever gets packed up and shipped.

One of the easiest ways to stay on top of all of it is to write down every account connected to the phone before the reset even kicks off. Head into your settings, go through your app list and just check each fitness app one by one. The whole process takes maybe 5 minutes and at the end of it you’ll have a full record of everything that still needs to be signed out.

Once that list is ready, go through it from top to bottom. When everything is checked off, you can move forward with the reset and feel confident that nothing got left behind. It’s a small step that takes almost no time at all, and skipping it can turn a smooth sale into a headache - just get it done first.

Encrypt Your Phone Before a Factory Reset

Account sign-outs are a great step, and encryption builds on that protection. What it does is scramble everything stored on the device into unreadable data - so even if small scraps of information somehow manage to survive a factory reset, they’re going to be useless to whoever ends up with it.

Health data is probably the most sensitive category of all, and it deserves a little extra attention. Your heart rate history, sleep records and activity logs are permanent once they leave your device - there’s no way to take any of that back, which is why you want to manage it before your phone ends up in somebody else’s hands.

Fortunately, lots of newer phones do this automatically. On an iPhone, encryption is already turned on by default as long as you have a passcode set - and at this point, almost everyone does. Android does take a little more effort on your part. Head into your security settings and look for an encryption status option. The exact location will change depending on your phone model, but it’s usually somewhere under “Privacy” or “Security.”

If your phone isn’t encrypted, take care of that first - then run a factory reset. The order actually matters here. With encryption handled first, any leftover data from the reset is already scrambled to the point where nobody’s pulling anything worthwhile out of it, though it does eat up a few extra minutes up front. But it fills in a genuine security gap that account sign-outs alone were never going to cover.

Older Android devices don’t always encrypt automatically the way newer ones do, so it’s worth a minute to verify your status before you wipe or reset anything (this tends to be one of the most skipped steps I see), and it’s also one of the easiest ones to fix before it can ever become a problem.

Delete the Cloud Backups You Left Behind

A freshly encrypted and wiped phone is only one part of what needs your attention. Your health data has a tendency to hang around in the cloud long after you’ve wiped a device clean. If your phone was ever backed up to iCloud, Google One or any similar service, those backups will carry your health and fitness records right along with them. A new owner could restore from your old backup without ever realizing it, or your data could just sit in cloud storage, still accessible online - sometimes for months or years afterward.

Before you hand the phone over, take a few extra minutes to log into your cloud account and look at what’s actually been saved up there. On your iPhone, head into your iCloud settings and delete your backup. On your Android, the same feature lives in your Google account settings - the idea is the same either way. Fitness apps are another item to check on while you’re in there. Apps like Strava, MyFitnessPal and Garmin Connect all have their own separate cloud storage that won’t get wiped along with the rest of the device.

The cloud step is the most skipped part of this whole process - and in my experience, it’s the one that gets left incomplete more than almost anything else. With all your attention on the physical device right in front of you, it’s not hard to forget that a full copy of your data might still be out there somewhere. A clean device with an untouched cloud backup still leaves your personal data exposed. Deleting content from your iPhone doesn’t always mean it’s gone from iCloud - and the same logic applies to health and fitness data stored in the cloud.

Once your backups are all taken care of, that phone can go to its next owner without any of your data attached - your health history, your fitness records and all your other personal data will stay right where it belongs.

Trade Your Old Phone for Cash Today

Once you’ve gone through each step, the logic behind the whole process starts to make sense. A factory reset by itself just doesn’t go deep enough to wipe the personal data that health apps accumulate over months, sometimes years, of day-to-day use. Your app data, your accounts, your encryption settings and your backups all need to be taken care of if you actually want to walk away clean. It matters. Leave even one of them out and you could expose more than you want.

A satisfying part of the whole process is the fact that the phone that you’re handing over is clean. No leftover sleep records, no old GPS routes, no health history still attached to an account that you forgot even existed. That calm, no-loose-ends feeling at the end of a sale is the best part - and it’s well worth the extra effort to get there. Before you hand it over, it’s also worth moving any authenticator apps so you don’t lose access to your accounts.

At ecoATM, we make the whole selling process about as painless as it gets once you’re ready to move on. With more than 5,000 kiosks spread across the country, you can walk in, get a price on it right then and there and leave with cash or a direct payout on the same day. No waiting around, no haggling with strangers online - just a fast experience from start to finish. Most sellers have no idea how quick it is until they try it themselves. Find a kiosk near you and see what your freshly wiped phone is worth.