Android or iPhone, honestly
Security labs such as AV-TEST track a steady flow of new Android malware every month, while mass malware on iOS remains rare. Android runs most of the world’s phones and lets you install apps from outside Google Play, which is where most malicious apps come from. In Canada, an iPhone only installs apps from the App Store; the attacks that do reach iPhones are mostly expensive spyware aimed at journalists, activists or executives.
The phones really at risk
- Phones that no longer get new versions of their software. The iPhone 11 and newer run the latest iOS; the XS, XS Max and XR stayed on iOS 18 and the X on iOS 16: Apple still sends them occasional security fixes, but those fixes will eventually stop.
- Phones with apps from unknown sources, jailbroken or rooted.
- Phones whose owner reuses passwords or taps links received by text.
- Old phones sold or given away without being erased.
Five habits that matter more than the brand
- Install updates as soon as they arrive.
- Download apps only from the App Store or Google Play.
- A passcode of at least six digits, plus Face ID or a fingerprint.
- Two-factor authentication with an app, not only by text.
- A different password for every account, kept in a password manager.
When you sell: your data is the target
Before you sell, sign out and erase the phone: the step by step. At SubSell, every phone we buy also goes through professional data-erasure software before any resale, and you can buy a recent refurbished iPhone, checked, that still gets updates.