How do I check how a repair shop handles customer passwords and private files?

Start with the intake form. Does it ask for a password at all, and where does that page end up? A sticky note on a monitor tells you more than any policy binder. Ask whether technicians use their own logins or one shared account, and whether former employees can still get in.

Next, look at the bench. Customer drives often sit in bins or on shelves for weeks. Ask how they are labelled, who can reach them, and how a drive is wiped or destroyed once the job is done. Ask whether backups made during a repair are deleted, and when. If the shop keeps client images for later reference, find out why.

Finally, ask about mistakes. Has a customer ever complained about a file being opened, or a device going missing? How was it handled? A shop with a calm, specific answer has likely thought about it. Ask the seller to put the practices in writing, and have your lawyer advise on any promises the shop has made to customers that would pass to you. Also ask how the staff were trained, and whether they sign anything about customer privacy.

Key takeaways

• Follow one repair from drop-off to pickup and note every place a password or file is stored.
• Look for shared logins, loose notes and unlabelled drives rather than relying on a written policy.
• Ask for past complaints and how they were handled before you take over customer promises.