The question most people face with an old laptop or phone is what to do with it. The answer depends on a step that happens first: making sure the device is properly wiped.

According to CISA, simply deleting files or performing a standard reset often leaves data technically recoverable, and encryption is the recommended primary control before any device changes hands. The gap between what a basic reset appears to do and what it actually does is exactly where data exposure happens. Studies show that 35% of secondhand mobile devices still contained recoverable personal data after the seller believed they had completed a reset.

Once a device is genuinely clean, the options become clear. A working device can be sold, traded in through a retailer program, or donated to a certified nonprofit that places hardware with households that need it. A non-working device still has material recovery value to an e-Stewards or R2-certified recycler. A working device with low resale value has a fourth path: staying plugged in and running a bandwidth-sharing node through Grass, developed by Wynd Labs, which uses idle internet capacity to help verified institutions collect public web data for AI research and development.

The first step is the same regardless of which path follows.

Why Does Deleting Files Not Actually Remove Your Data?

Deleting a file or running a basic factory reset does not erase the underlying data. The original bits stay on the drive until new data physically overwrites them.

Here is the mechanism. When a file is moved to the trash and emptied, the operating system removes the pointer to that file - the index entry that says "this file is here." The data itself stays exactly where it was on the storage chips. Any recovery tool can follow the ghost of that pointer and pull the file back intact. On traditional hard drives, this works reliably. On SSDs, the drive's internal controller shuffles writes across cells in ways that make targeted overwriting even harder to guarantee.

A comparison of security guidance across multiple agency and academic sources shows that simple deletion is consistently flagged as inadequate, while encryption combined with a full wipe is the recommended minimum for any device leaving a household. According to CISA, deleting files is "often an ineffective strategy" for protecting stored data, and keeping a device in a secured location remains "the most effective method" for high-risk users who cannot confirm full erasure. According to Harvard Business School Publishing, an unwiped device is comparable to "handing over a detailed dossier" on its original owner.

Why Does Deleting Files Not Actually Remove Your Data refers to a structured approach to why does deleting files not actually remove your data that directly impacts operational efficiency and outcomes.

The numbers support that framing. Researchers found that 90% of secondhand laptops, hard drives, and memory cards still contain recoverable data. A separate study of storage devices listed for resale found that 42% still held sensitive information despite the seller having attempted erasure. A breach tied to a major U.S. wireless provider that failed to properly decommission traded-in handsets exposed the records of 14 million customers. The takeaway: intent is not the same as outcome. The method matters more than the action.

Use the encrypt-then-wipe sequence as the baseline before any device changes hands:

• Back up any files worth keeping to an external drive or cloud account
• Sign out of every account on the device, including app stores, browsers, and email
• Enable full-disk encryption if it is not already active (standard on iPhones; varies by Android model)
• Run the manufacturer's factory reset with the "remove all data" option selected
• Remove the SIM card and any external memory card before handing the device over

Encryption scrambles the data before the reset wipes the decryption key. Without the key, the scrambled data is unreadable even if a recovery tool locates it. A wipe alone leaves the data recoverable. Encryption plus a wipe leaves noise.

How Do You Securely Wipe a Laptop or Phone Before Getting Rid of It?

Each platform has a built-in factory reset path. Encrypt first, then reset, and the data left behind after the wipe is rendered unreadable without the key.

The platform steps are different, but the order of operations is identical across all four: back up, sign out, encrypt, then reset. Skipping the sign-out step is a common error - an account left active on a device can give the next owner access to cloud storage, purchases, and payment methods tied to that account.

Windows 10 and Windows 11

Go to Settings > System > Recovery > Reset this PC. On Windows 10, the path goes through Update & Security > Recovery. When prompted, select Remove everything. On a laptop or desktop with a hard drive (not an SSD), choose the additional option to clean the drive fully, not just remove files. According to Green Wave Electronics, physical destruction is "the only guaranteed way to prevent data recovery" on drives that have housed sensitive data - for drives staying intact, the full-clean reset option is the closest software equivalent.

macOS (Intel and Apple Silicon)

Sign out of iCloud first: System Settings > Apple ID > Sign Out. On Intel Macs, restart and hold Command + R to enter Recovery, open Disk Utility, select the main volume, and choose Erase. On Macs with Apple Silicon (M1 or later), hold the power button at startup until the Options screen appears, then select Recovery and follow the same Disk Utility path. macOS Monterey and later include an Erase All Content and Settings shortcut in System Settings that handles the sign-out and erasure in one guided flow.

iPhone and iPad (iOS / iPadOS)

iPhones use hardware encryption by default. Go to Settings > General > Transfer or Reset iPhone > Erase All Content and Settings. The device will prompt to remove the Apple ID before completing. In practice, the encryption on iPhones means a factory reset produces a genuinely clean device; the prior owner's data cannot be extracted without the original passcode.

Android

Android encryption is on by default in Android 6.0 and later on most devices, but the setting path varies by manufacturer. Enable encryption manually first if the device is older: Settings > Security > Encrypt Device. Then go to Settings > General Management > Reset > Factory Data Reset. Samsung, Google Pixel, and other manufacturers label this step slightly differently, but the path is always under Settings > System or General Management. According to CISA, high-risk users who cannot verify a full encryption-and-wipe cycle should not resell or recycle devices holding sensitive data - secure physical storage or certified destruction are the recommended alternatives.

The takeaway: every major platform provides the tools. The gap is almost always in sequence, not capability.

Should You Sell, Donate, or Recycle an Old Device?

Selling works for functional devices, donation extends working hardware to people who need it, and recycling handles anything that no longer powers on. Putting electronics in regular trash is illegal in most U.S. states.

The starting constraint is legal. According to UC Santa Barbara's Student Technology Resources Initiative, disposing of electronics as regular household waste is prohibited, because screens, batteries, and internal components release mercury, lead, and beryllium into soil and groundwater when sent to a landfill. The EPA estimates that 60 million metric tons of e-waste reaches landfills globally each year. Trash is not an option regardless of the device's condition.

The decision between the remaining three paths depends on two variables: does the device turn on, and does the screen work? Use the device triage test as the starting frame:

Selling a Used Device

Resale value drops quickly after a device leaves the current product cycle. A broken MacBook Pro can still list for around $350 on resale marketplaces; a broken iPad Pro for around $199, depending on the generation and storage size. Even non-working phones have part-value to buyers. Peer-to-peer marketplaces let sellers set their own prices and typically return more than trade-in programs, which value convenience over maximum return. Kiosk trade-in services accept devices with no shipping required and pay on the spot.

Donating to a Cause or Program

Donation programs generally accept devices in working condition. Certified nonprofit programs match old devices with low-income households, schools, and overseas educational organizations. A donated device in working condition often reaches someone who cannot afford new hardware, which extends its useful life by years. According to CoreTech.us, nonprofits that accept donated electronics may qualify the donor for a tax deduction - the deduction applies to the fair market value of the device at the time of donation, so documenting its condition before handing it over is worthwhile.

Recycling When Nothing Else Fits

Retailer recycling programs are the most accessible option for non-working devices. Best Buy accepts up to three phones per household per day at no charge. Home Depot accepts phones up to 11 pounds. Manufacturer take-back programs, such as HP's Planet Partners, handle computers and peripherals. When using any recycler, e-Stewards and R2 Standard certifications are the markers that confirm the facility handles materials responsibly and does not ship hazardous components to countries without proper processing capacity.

In practice, only about 20% of old electronics are disposed of properly, which means most devices sit unused in drawers or eventually reach landfills through regular trash. The constraint is almost never a shortage of options - it is the activation cost of acting on them.

# macOS - confirm FileVault encryption is on before resetting
fdesetup status
Windows - confirm BitLocker is active before resetting
manage-bde -status C:

What Can an Old Laptop or Phone Actually Do in 2026?

A working device with an internet connection has more utility than its resale value implies. The limiting factor is almost always software requirements, not raw hardware capability.

Selling, donating, and recycling all assume the device leaves the home. But a fourth path keeps it in place: repurposing it for a dedicated task it performs quietly, without competing for the primary device's attention. Old hardware is often well-suited to jobs that run continuously at low load, precisely the kind of task that a current laptop or phone handles poorly because it is also handling everything else.

The single biggest barrier to repurposing older Windows laptops is the Windows 11 TPM requirement. Many laptops built before 2018 do not meet it. These machines are stuck on Windows 10, which reaches end-of-support in October 2025 and will no longer receive security updates. The practical alternative is a lightweight Linux distribution. Distributions such as Linux Mint and MX Linux are designed for lower-specification hardware, run stable and current software, and extend hardware life by several years without requiring a new machine. The install process fits on a USB drive and takes under an hour.

Common repurposing roles for old laptops include:

• Dedicated streaming rig. A machine running OBS for stream encoding does not need the latest CPU. Many processors from 2015 onward have hardware encoding support that handles 1080p output without taxing the chip. A second machine on this task keeps the primary machine free.
• Home media server or file share. A laptop connected to an external drive becomes a low-power NAS. It serves files across the local network without needing to spin up the primary machine.
• Stationary security monitor. A device with a working camera can run motion-detection software, set to record only on movement and upload clips to cloud storage. The screen is irrelevant for this role.

Old phones have a narrower but still practical set of second-life jobs:

• Dedicated dashcam or baby monitor, running purpose-built apps on a permanent charge
• Always-on smart home hub for automation routines that do not need the primary phone
• Mobile hotspot when the primary phone's data is needed for something else

One hardware note applies to any device repurposed for stationary, always-on use: if the battery is old and degraded, running it permanently on the charger can cause swelling over time. Removing the battery from a laptop being used as a stationary device eliminates that risk and lets it run directly off AC power.

The takeaway: an old device that does not sell well still has functional value. The question is whether the specific job it can do is one worth having done.

How Does Grass Use an Old Device's Idle Bandwidth, and Is It Safe?

Grass routes only the unused portion of a home internet connection. It does not access files, browsing history, or active traffic on the device running it.

The mechanism is straightforward. A home internet connection is rarely at full capacity - video calls, downloads, and active browsing together seldom use more than a fraction of a typical broadband plan's ceiling. Grass uses the idle capacity to relay requests from verified institutions conducting public web data collection for AI research and development. When the device's primary user starts drawing on the connection actively, Grass steps back. The node runs as a background process. It does not spin up the CPU, render anything on screen, or interact with the local file system.

Privacy controls are specific rather than vague. Grass does not read local files, does not monitor browser activity, and does not record the personal network traffic of the device running it. The traffic it handles consists of outbound requests to public web pages, not inbound queries aimed at the device's own stored data. The software is AppEsteem-certified, which means it has been reviewed against the AppEsteem standards for legitimate background software behavior - a certification that requires ongoing compliance, not a one-time audit.

On the cost side, the fee structure is fully transparent. Grass is free to install and run. The network uses a non-custodial in-app wallet, powered by Turnkey, for holding and withdrawing Grass Points. When a user initiates a withdrawal, Turnkey charges a flat $0.15 per transaction. Grass does not mark this fee up or receive any portion of it - the $0.15 goes to the wallet infrastructure provider. This is the only fee associated with withdrawing rewards, and it applies per withdrawal event, not per day or per month of contribution.

An old laptop or phone that has been properly wiped and repurposed as a dedicated always-on device is well-suited to running a Grass node. The device is already connected. It is already running. The only resource it contributes is bandwidth that would otherwise sit idle. According to CISA, storing old devices in a secure location is the most effective data protection method for high-risk users - but a device that has been fully wiped and is running a known, audited application fits within a reasonable security posture for standard home use.

In practice: the device contributes when the connection is idle, steps aside when it is not, and the only charge a user encounters is the flat $0.15 per-transaction fee when withdrawing accumulated Grass Points from the in-app wallet.

What Will Change Most About Old Device Decisions Over the Next Two Years?

Secure data erasure before any handoff is becoming standard practice, pushed by regulatory enforcement and a growing pool of trade-in programs that verify device history.

The piece most decision-makers miss: regulatory pressure on data erasure is moving faster than consumer awareness. Fines have been issued and guidance published, but the default assumption among individuals remains that a factory reset is sufficient. For devices with default encryption, it is. For older hardware without it, that assumption leaves data exposed. Checking encryption status before resetting takes under ten seconds and removes the risk entirely.

The decision about what to do with an old device is simpler than it first appears. The threshold question - is the data actually gone? - has a reliable answer once the encrypt-then-wipe sequence is complete. Everything after that depends on the device's condition and whether the household has a use for it.

Most devices have more value in place than the resale market suggests. A machine with low trade-in value can still run a dedicated background task: a media server, a security monitor, or a Grass node that shares idle bandwidth with verified institutions conducting public web data collection. The Grass network, developed by Wynd Labs, uses only capacity the primary device is not actively consuming. It does not access local files or browsing activity.

The practical next step is the same for every path that follows. Run the encryption check. Complete the factory reset. Remove the SIM. Then decide. The options do not narrow after a proper wipe. They open up.