I have an Android smartphone that I don't trust. It has an old version of Android and has been vulnerable to Stagefright and a host of a hundred other vulnerabilities for months. Although there is no clear sign of compromise, because of the number of security holes open for so long, I simply don't trust the device, and assume that it has been compromised.
That being the case, I am switching to a new Android phone (that has the latest OS, and will receive all the latest patches for 2-3 years). Obviously there are zero-days that could cause my device to become compromised, but I would like to START with what I can with some confidence say is a clean device.
I also want to make my life easier, by restoring data from backup. I am assuming I can probably relatively safety re-sync my calendar and contacts from Google servers, but I am afraid to restore my apps.
What are relatively benign things I can restore from backup (that is Sync from Google servers) and what should I avoid?
Caveat: I am fully aware there is no such thing as a completely secure phone. I am simply looking to provide myself a reasonable level of assurance that I am not going to put myself in harms way by restoring backed up data.