Reboot Hub · Buying Guide
Updated June 12, 2026
If you trade in a drone that still holds construction photos, crop‑spraying maps, client videos, or photogrammetry datasets, you may expose sensitive information and unintentionally run afoul of privacy legislation. Below we walk through the practical steps and the region‑specific legal context – with honest caveats about what a factory reset can and cannot do.
DJI consumer and enterprise drones collect far more than what you see in the gallery roll. A standard “Format” or “Factory Reset” through the app typically wipes user‑facing media but can leave behind:
In the context of Latin American privacy laws, the definition of “personal data” often extends to location information, device identifiers, and anything that can be linked to an identifiable person or business. A quick tap‑through in the app is rarely enough to meet the data‑minimisation expectations of regulators in Brazil, Peru, Colombia, Chile, or Mexico.
| Data type | Where it lives | Why it matters under privacy law |
|---|---|---|
| Construction / obra photos & videos | SD card, internal storage, DJI FlightHub | May show workers’ faces, license plates, site‑specific security layouts |
| Agricultural crop & spraying data | Internal flash, SD card, Terra/Agras platform | Reveals field coordinates, chemical application rates, and often farmer‑personal information |
| Topographic / photogrammetry datasets | SD card, internal storage, Terra | Contains geo‑tagged imagery that can pinpoint private property or infrastructure |
| Client video footage (filmmakers) | SD card, internal recorder | Personal data of subjects; commercial confidentiality agreements often mandate deletion |
| Flight logs & telemetry | Internal memory (inexportable without DJI Assistant 2) | GPS co‑ordinates, home point location, and flight patterns that can identify habitual operational areas |
A disciplined wipe addresses all five layers – not just popping out the SD card and hitting “Format.”
Copy the full contents of the SD card and any device‑internal storage to an encrypted drive. Check the DJI Fly app’s “Album” and any cloud‑synced folders (DJI FlightHub, Terra) before proceeding.
Open the DJI app, go to Profile → Device Management, select the aircraft, and tap Remove Device. This also unlinks the drone from the associated DJI Care Refresh plan. Without this step, the next owner could still encounter your account bind – and your flight logs might remain accessible through cloud backup.
After the reset, power‑cycle the drone and confirm that no media or flight records remain.
A simple “format” makes data recoverable with free tools. We recommend a secure‑erase utility (e.g., SD Card Formatter with overwrite, or your operating system’s full‑format option). For enterprise customers, a US DoD‑level 3‑pass wipe is overkill for most but can be considered if your contract requires forensic‑grade sanitisation.
If you operated the drone under a specific authorisation (e.g., Brazil’s SARPAS for flights in controlled airspace, or a Brazilian ANAC registration under RBAC‑E 94), you may need to cancel or update the operator link. This step doesn’t erase data, but it disconnects your responsibility for the airframe and should be part of the pre‑trade‑in due diligence.
Keep a short written record – screenshots of the factory reset screen, a note on the secure‑erase method used, and confirmation that the drone was unlinked. This can serve as a good‑faith demonstration if a privacy question ever arises after the sale.
The LGPD applies to any processing of personal data connected to an individual in Brazil. Enterprise drones that capture images of identifiable people, vehicle plates, or private property can create a “personal data processing” scenario. Under LGPD principles, data should not be kept longer than necessary for the original purpose. Trading in a drone with residual data could be interpreted as unauthorised disclosure. The practical advice for a Brazilian operator: execute a full data wipe before the ownership changes hands. For specific compliance questions, check with your legal counsel or the Brazilian Data Protection Authority (ANPD) – our guide cannot substitute for legal advice; rules change.
Peru’s Constitution and its data protection law grant individuals the right to access, rectify, cancel, and oppose the use of their personal data (known as Hábeas Data). Erasing crop‑data, agricultural markup, and field‑mapping datasets before a trade‑in reduces the chance that a farmer’s precise field coordinates or production data end up with an unintended third party. If you fly drone operations that collect agronomic information, treat it as personal data belonging to the farmer; wiping the drone fully aligns with the fundamental right to cancellation.
Colombia’s Hábeas Data framework (Law 1581 of 2012 and regulatory decrees) imposes obligations on data controllers regarding the security and final disposition of personal information. When a drone holds topographic surveys that include geo‑tagged images of private properties, it is prudent to consider those images as personal data if they can identify a person or their assets. A trade‑in without erasing such data could expose the seller to a complaint before the Colombian Superintendence of Industry and Commerce (SIC). Our recommendation: perform a secure wipe and document it; if a third party handles the refurbishment, request a data‑handling certificate.
Chile’s data protection law (Ley N° 19.628) focuses on the processing of personal data in both public and private sectors. For construction (“obra”) footage, any image that identifies a worker, visitor, or vehicle plate falls under the definition of personal data. Selling a DJI drone that still stores those images could be considered an unauthorised communication. While the legal threshold for liability varies, a full deletion before trade‑in is a straightforward way to lower your exposure. Because regulations evolve, always verify the current interpretation with the Chilean data protection authority or a qualified professional.
The Mexican Federal Law on Protection of Personal Data Held by Private Parties mandates that data controllers must cancel personal data once the purpose of processing has ended, unless a legal exception applies. For a filmmaker who used a DJI Phantom or Inspire to capture client videos, the footage typically contains personal data (faces, voices, location identifiers). Since trade‑in transfers the physical storage, wiping all client material is essential to respect the data subject’s rights. We also recommend reviewing any consent forms you used with subjects – some may require a specific deletion timeline, which can be met by the factory reset and SD card sanitation.
Disclaimer: The above is a practical summary based on the general principles of the mentioned legal frameworks. It is not – and should not be taken as – legal advice. Rules are subject to change, and the specifics of your operation will determine your obligations. Consult the relevant national data protection authority or an attorney for binding guidance.
Reboot Hub’s refurbishment process – based in our China supply chain (Shenzhen/Hong Kong) and carried out by MOHRSS Level‑3 certified technicians – includes a multi‑point bench test that verifies both hardware operability and data sanitation.
Every unit that enters our trade‑in programme is:
If you’d rather not do every check yourself, see the Reboot Hub Standard – it covers our entire refurbishment and verification workflow.
| Check | Action | Notes |
|---|---|---|
| ☐ Backup | Copy all required work data to a secure drive | Verify the copy before starting the wipe |
| ☐ Unlink DJI account | Remove device from Fly / GO / Pilot app | Confirm in Device Management that the drone no longer appears |
| ☐ Factory reset aircraft | Use the app’s reset function or DJI Assistant 2 | Re‑check internal storage afterwards |
| ☐ Secure‑erase SD card | Overwrite format (not quick format) | On enterprise drones, also erase internal SSD |
| ☐ Cloud cleanup | Delete DJI FlightHub projects, Terra missions, and third‑party accounts linked to the drone’s serial | If you used Pix4Dcloud or DroneDeploy, manually remove datasets |
| ☐ Deregister from aviation authority | Cancel any active SARPAS authorisation (Brazil) or update ANAC registration if required | This step is recommended but separate from data privacy |
| ☐ Document wipe | Save screenshots or log the method | Helps demonstrate good‑faith compliance |
Start with a full backup, then unlink the drone from your DJI account and perform a factory reset through the DJI app. Remove the SD card and run a secure‑erase utility (or use a full‑format with overwrite). If you used DJI FlightHub to process site imagery, delete the project that holds those files. Documenting these actions is a practical way to show you’ve taken reasonable steps to align with LGPD data‑minimisation expectations. For LGPD‑specific obligations, consult a local privacy professional.
Agro‑data often sits on internal storage and associated cloud platforms (DJI Terra or the Agras management console). Perform a factory reset on the aircraft, then manually purge all mission logs and maps from the cloud. Because Peru’s Hábeas Data gives individuals the right to cancellation, treating a farmer’s field coordinates as personal data and wiping them before trade‑in reduces risk. For a confirmed compliant process, check with Peru’s data protection authority or a local expert.
A quick format usually only removes the file allocation table; the underlying video data can still be recovered. If the footage contains identifiable clients or subjects, Mexico’s data protection law expects you to take appropriate measures to delete that personal data. A full‑overwrite or a secure‑erase tool is a stronger approach. Combine it with an aircraft factory reset and unlinking from your DJI account, and you’ll be in far better standing.
It’s a good first step, but alone it may not be enough. Colombian Hábeas Data legislation emphasises that data controllers must ensure information is not accessible after disposal. Since drones often cache lower‑resolution versions on internal storage, perform a factory reset and wipe any internal memory device. Also check cloud‑synced platforms – a retained thumbnail could still be linked to an individual. Document the full process in case you need to show compliance to the SIC.
Every trade‑in unit passes through our multi‑point bench test, which includes unlinking the drone from any bound accounts, performing a deep factory reset, and securely wiping all storage media with industry‑standard methods. Our MOHRSS Level‑3 technicians verify that no residual data remains before the drone is graded and certified. For full details, see our grading standard and the Reboot Hub Standard.
Data privacy and aviation registration are separate matters, but both are relevant. A SARPAS authorisation is linked to the operator, not the aircraft, so you should close or update it if you’ll no longer be piloting that drone. Under ANAC’s RBAC‑E 94, depending on the drone’s weight class you may be required to deregister or transfer the airframe. We recommend checking with DECEA and ANAC for the latest procedure – it isn’t about data privacy, but it keeps your operator record clean.
Wiping a DJI drone thoroughly before a trade‑in isn’t just good digital hygiene; it’s a practical way to honour the data protection frameworks across Latin America. A few careful steps today can save you from awkward conversations – and potential regulatory headaches – tomorrow.
If you’re ready to turn your clean, data‑free drone into value, browse our current inventory to compare models, or review the DJI drone comparison for 2026 to see what your next upgrade might look like. Every refurbished unit sold by Reboot Hub – a China‑based operator with a Shenzhen/Hong Kong supply chain – carries our 180‑day warranty and has been sanitised to our Pristine Pre‑Owned or Flawless standard.
Ready to trade in?
Skip the gamble — every Reboot Hub drone is graded, bench-tested & warrantied.
Browse verified drones