This week, I got a new car—well, new to me—and quickly discovered an unexpected issue: an old battery with a mysterious drainage problem. After a lot of tinkering by a car electrical specialist, we found the culprit—a hidden tracker plugged into the battery. A new battery and a removed tracker later, the problem was solved.

What was unsettling, though, was the uncertainty surrounding the tracker. There was no clear way to know if it was still active or if someone had been monitoring the car’s location. I’d like to believe the previous owner had deactivated it, but relying on hope isn’t exactly a solid security measure. While it was probably harmless, there’s always the possibility that an unscrupulous seller could leave an active tracker in place and steal the car later.
The Internet of Things opens us to new possibilities
This situation got me thinking—not just about cars, but about all the second-hand and reconditioned equipment we buy for our businesses. Many of us can’t always afford brand-new devices, whether it’s laptops, phones, or other smart gadgets. And with the rise of the Internet of Things (IoT), devices are increasingly interconnected, often equipped with tracking features.
Trackers, bots, cookies—they’re all part of our digital ecosystem. I have tracking enabled on my phone and laptop so I can locate them or perform a remote wipe if they’re lost or stolen. But what if a previous owner left similar tracking features active on a device you’ve just bought? Without realising it, you could be exposing your business to serious security risks.
So how can you ensure that second-hand devices aren’t carrying hidden trackers or spyware? Here are some top tips:
- Factory Reset: Always perform a full factory reset on any second-hand device. This wipes user data, including potential hidden tracking apps or spyware.
- Update Software and Firmware: Outdated software can have vulnerabilities. Update the device to the latest version to ensure security patches are applied.
- Check for Tracking Apps: Before using a new device, check for any unfamiliar apps or services that could be tracking activity or location.
- Review Device Permissions: Go through app permissions carefully. Revoke any unnecessary access, especially for location, camera, and microphone.
- Use Security Software: Install reputable security software that can scan for malware, spyware, and suspicious behaviour.
- Check for Hardware Trackers: Just like the hidden car tracker, some physical devices can be attached to laptops or phones. Give your new device a thorough inspection.
- Network Monitoring: Use tools to monitor network traffic from your devices. Unusual data transfers can indicate hidden trackers or malware.
- Secure IoT Devices: Change default passwords on IoT devices and use strong, unique credentials. Many IoT gadgets come with generic logins that are easily exploited.
This experience was a strong reminder of how interconnected our world has become—and how crucial it is to think about data security, not just online but in the physical devices we use daily. Whether it’s a car, or a laptop, every device connected to the internet is a potential entry point for security breaches. And when you are using your devices to handle your business data and your client’s data the stakes are even higher.
When buying second-hand, it’s always better to be cautious and proactive. After all, in the world of data security, hope is never a strategy.
What’s your strategy for making sure all is well?