I recently bought a used phone on ebay. When I turned it on it had the previous owner's data in tact and no passcode. I opened Gmail and was in their account.

I immediately factory reset the phone. My point being sensitive data leaks all over the place in many ways in today's world.