Do I need to replace my smartphone when I sign in to Google?

We sometimes hear from people asking, “I accidentally logged in to Google. Can I no longer use this device?” First, take a breath. If simply logging in could take over a smartphone, every smartphone in the world would be compromised by now.

Logging in doesn’t mean “infection”; it means “a record.” If you separate out what was saved and where, you can decide for yourself whether you need to replace your device.

Records are stored in three places

Roughly speaking, logging in leaves three kinds of records.

First, there are activity records associated with your Google account: when and from which device you searched for what. These are stored on Google’s servers, so throwing away your phone won’t erase them. Conversely, resetting your phone won’t erase them either, so to remove them, you need to do so from your account settings.

Second, there’s data in your browser. This includes cookies that keep you logged in and your browsing history. Log out of the browser and delete its data, and that takes care of what’s on the device.

Third, there are permissions granted to apps. This is separate from logging in through a browser. These permissions come into play when you install Google Play or apps and allow access to your contacts or location. They don’t come into play just because you “logged in once through a browser.”

Logging in through a browser and installing Google Play are different things

This is the point people most often confuse. Opening Gmail in a browser and installing Google Play and downloading apps leave completely different things behind. The former is limited to the browser, while the latter adds apps and permissions to the device. The answer to your question depends on which one you did, so try to remember that first.

Sandboxing isn’t an “eraser”

Sometimes people say of GrapheneOS’s Sandboxed Google Play that “nothing is left behind because it’s isolated,” but that’s not quite right. Sandboxing is a system that gives Google apps only the same permissions as ordinary apps. It’s a fence that limits what they can do, not a feature that erases the traces they leave. Records associated with your account remain regardless of which device you use.

“My device’s identity was exposed” probably hasn’t happened

Many people considering replacing their device are worried that Google might have learned their IMEI (the serial number unique to each device).

Logging in through a browser doesn’t share your IMEI. Browsers don’t have permission to read it in the first place. Anti-Spy Phone’s Sandboxed Google Play is also treated like an ordinary app, so it can’t read hardware identifiers like the IMEI. In other words, logging in to Google on this device and Google learning this device’s identity are two separate events.

There’s one more factor specific to Anti-Spy Phone. The devices we deliver are either unused or Grade A refurbished, and unlike phones purchased with a contract at a mobile carrier’s store, their IMEIs aren’t directly linked to your name. Even if an IMEI were recorded somewhere, it would be difficult to trace it back to “whose device it is.”

On the other hand, your mobile carrier definitely knows your IMEI. This has nothing to do with whether you logged in to Google; it’s shared as soon as you insert a SIM card and connect to the network. Also, if you previously used the same Google account on a regular smartphone, information about that old device may still be there. If you consider concerns about your “current device” and your “old device” separately, you’ll be able to tell whether replacing your phone would solve the problem.

Before asking for advice, try sorting things out in this order

Before deciding to replace your device, it helps to check the following in order:

• Did you log in only through a browser, or did you also install Google Play?
• Is the account linked to your real name or your usual email address?
• Have you used that account before on a regular Android phone or iPhone?
• What would you lose if you deleted data or reset the device, such as photos or messages?

The fourth point is especially important. If you rush into resetting your device because you’re worried and end up deleting data you wanted to keep, you’ll only replace one worry with another.

If you contact us with the results of your checks, we can help you decide whether you can keep using your device. In many cases, there are things you can do before considering a replacement.