What You Should Never Keep on Your Phone (Most Canadians Are Guilty of at Least 3)

Your phone goes everywhere with you. It also holds everything about you — banking access, government IDs, private conversations, and financial records. And according to the Office of the Privacy Commissioner of Canada, 89% of Canadians are concerned about protecting their personal data, yet most haven't taken the basic steps to actually do it.
One of the most overlooked steps? Removing the data that should never have been on your phone in the first place.
At Mobile Snap, we repair, buy, and sell smartphones at over 100 locations across Canada. We see what happens when a device gets cracked, stolen, or compromised — and we can tell you firsthand, most people are carrying way more risk than they realize.
Here's what needs to come off your phone.
1. Saved Passwords in Notes or Autofill
Using your phone's notes app as a password log is one of the most common mistakes Canadian smartphone users make. The problem isn't just someone picking up your unlocked device — it's that your notes likely sync automatically to cloud storage. One account compromise and everything cascades. Use a dedicated password manager with end-to-end encryption instead. That's one master password protecting everything, not a plain-text document floating in the cloud.
2. Bank Account Numbers and Financial PINs
Mobile banking in Canada is growing fast — over 50% of online financial transactions now happen on smartphones. But there's a difference between using a banking app and storing your account credentials, PINs, or security questions in an unprotected file on the same device. If your phone is lost or stolen, that's not just a device-replacement situation — it's potential financial fraud. Enable two-factor authentication on every financial app, and never store login details on the device itself.
3. Photos of Your Driver's Licence, SIN Card, or Passport
Canadians routinely photograph their government-issued IDs, thinking it's a convenient backup. Identity thieves think it's a gift. A photo of your Social Insurance Number or driver's licence in your camera roll — especially if it's set to auto-sync to iCloud or Google Photos — is exposed the moment your account credentials are phished or guessed. Delete these images. If you need a temporary record, photograph it, use it, and delete it immediately.
4. Tax Documents and CRA Correspondence
T4s, Notice of Assessment letters, benefit statements — storing these as PDFs on your phone creates a direct path to tax fraud and identity theft. With this information, someone can impersonate you with the CRA, redirect benefit payments, or take out credit in your name. Sensitive government documents belong on a password-protected computer at home, not on a device you carry into coffee shops and leave on restaurant tables.
5. Private or Intimate Photos
Cloud backup is on by default for most Canadian iPhone and Android users. Most people don't think about that until they read a headline about an account breach. If images you'd consider deeply personal are sitting in an auto-syncing photo gallery, your security is only as strong as your Apple ID or Google account password. Store these locally on a home computer behind a strong password — not on a device that connects to public Wi-Fi and lives in your pocket.
6. Your Home Address in Exposed Documents
Utility bills, bank statements, lease agreements saved as PDFs — any document that clearly displays your civic address is a physical security risk if your device is compromised. Beyond stored documents, review which apps have location access on your phone. Social media apps frequently embed location data into posts without clear user awareness. Revoke location permissions from any app that has no functional reason to know where you are.
7. Social Media Accounts Left Permanently Logged In
An unlocked phone with active social media sessions is an open door. Anyone who gets into your device can read private messages, impersonate you, and contact everyone in your network. If you need to stay logged in for work or personal reasons, set up an additional app-level lock. On iPhone, Screen Time restrictions can password-protect individual apps. On Android, most manufacturers include native app lock functionality in security settings.
8. Contacts Labeled With Family Relationships
Labelling contacts "Mom," "Dad," or adding relationship emojis seems harmless. It isn't. If a scammer accesses your device or your messaging app, they immediately know who you're closest to — and who to impersonate when texting your family asking for an e-transfer or personal information. Use first and last names in your contacts list. It's one small habit change that closes a very easy social engineering door.
9. Medical Records and Insurance Documents
Health records, prescription details, insurance claim documents — this is some of the most sensitive personally identifiable information you own. Stored unprotected in a downloads folder or email thread on a mobile device, these documents are accessible to anyone who unlocks your screen. If mobile access to these records is genuinely necessary, use a secure, encrypted file app with its own separate password.
10. Biometrics as Your Only Security Layer
Face ID and fingerprint unlock are convenient — but they're not the strongest security option available. In a physical theft situation, biometric locks can be bypassed in ways a strong alphanumeric passcode cannot. Use biometrics for daily convenience, but set a complex backup passcode that isn't your birthday or a four-digit number. Run it through a password strength checker and make sure it would take more than seconds to crack.
A Damaged Phone Makes All of This Worse
Here's something most people don't connect: a cracked screen or a failing device doesn't just affect how your phone looks — it affects how secure it is. Screen damage can disable biometric sensors. Battery failure can cause unexpected shutdowns before a remote wipe completes. Water damage can corrupt the encryption on your storage.
If your phone is in rough shape, every piece of sensitive data on it is at higher risk.
We repair iPhones, Samsung Galaxy devices, Google Pixel phones, iPads, and MacBooks at over 100 Mobile Snap locations across Canada — most repairs done while you wait. And if your device has reached the end of life, we offer fair trade-in value toward your next phone.
Find your nearest location at mobilesnap.ca