A friend has broken his smartphone. It has (at least) three security issues:
- It is not protected by any PIN, password or fingerprint
- It automaticaly access gmail (I'm not sure if he just rememberd the password in the browser or if in some way, gmail knows the object itself via some kind on token)
- gmail contains tons of unencrypted passwords and ways to retreive almost every passwords.
In summary: My friend's privacy is open bar from that smartphone (and by the way also my privacy since I send him many emails).
Now it is broken. He is hesitating about making fix it in a shop: at the moment the smartphone is working, the reparator has access to everything.
- what to do to revoke the access to gmail from the smartphone when we don't have access to it ? (it is broken)
- what other security issue do I have to fear from leaving that smartphone in unkonwn hand for a couple of days ?