Buying an old Android phone? What you should know about privacy and security – CNET