Think about the last time you handed your phone across a counter. The screen was cracked, or the battery was dying, or the charging port had given up. You unlocked it — because they asked you to, because they need to test it — and you slid it across to a stranger. In that moment, you did not hand over a phone. You handed over your life.

There is no curtain at a repair counter. No screen between you and the person on the other side, no partition, no ritual of privacy. Your photos, your messages, your notes, your browsing, your entire recorded existence — all of it sits behind one unlocked screen, and the person holding it can open any of it. This is not a flaw in the system. This is the system. Repair requires access, and access is total.

WATCH · 29 SECONDS

Almost everyone has a secret. Almost no one has a safe place for it.

See how Everkeep keeps your most private data offline — numbered, sealed, and watched.

Start protecting — CAD 187/yr

Most people know this, in the way you know something without wanting to think about it. That is why, before a repair, so many of us do the same anxious dance: delete things, log out of things, back things up, worry about what we forgot to delete. The dance itself is the confession. We already understand that handing over the device means handing over everything. We just hope the stranger on the other side is decent, busy, or uninterested.

Hope is not a curtain.

The Cases We Already Know

Over the years, news outlets in multiple countries have reported cases of repair technicians snooping through customers' phones — copying photos, reading messages, leaking private material. These are public reports, not rumors, and they keep appearing. The details vary. The structure never does: a stranger, an unlocked device, a few unobserved minutes, and a copying process that takes seconds.

It would be a mistake to treat those cases as stories about bad people. They are stories about a bad arrangement. Any system in which one stranger holds your unlocked life for an hour, with no one watching, will eventually produce someone who looks. Curiosity is human. Opportunity is the variable. And the repair counter provides opportunity in its purest form: total access, no supervision, no record of what was opened.

The shop may have a sign on the wall promising to respect your privacy. A sign is a promise, not a structure. Promises do not stop a hand from swiping. They do not log what was opened. They do not make copying take longer than a few seconds. A promise is what you rely on when you have nothing better. And at the repair counter, you have nothing better — because the device itself is the vulnerability.

Every Handover Is the Same Handover

The repair shop is only the sharpest version of a pattern that runs through daily life. Selling an old phone. Trading one in. Lending your phone to someone to show them a photo — and watching them swipe one picture too far. Leaving a phone with a colleague, a relative, a hotel desk. Each time, the same exchange takes place: you hand over the device, and with it, everything on it. The only variables are who holds it and for how long.

This is the part people underestimate. We think of our phones as objects — glass, metal, a battery — because that is what we hold in our hands. But a phone is not an object. It is a container, and the container holds the most complete record of a person that has ever existed in a single place: who you love, what you worry about, what you have said in unguarded moments, what you keep and cannot show anyone. Handing that container to a stranger is not like handing over a toaster. It is like handing over the keys to your house and leaving town for the afternoon, except the house contains every room you have ever lived in.

Arendt wrote about the importance of a private realm — a space where a person can be themselves without an audience. The repair counter is the place where that realm collapses most completely, because the audience is one stranger with total access and no reason to look away.

The Familiar Tools Fail the Same Way

People reach for familiar solutions, and each one fails on the same point: it still passes through someone else's hands, or someone else's servers.

Your phone's local storage is the thing you keep handing over. Your cloud album syncs everything the moment you reconnect, so deleting from the phone does not delete from the account — and the account can be seen by the platform that runs it. A single external drive can be lost, dropped, or damaged, and it does nothing about the handover problem at all: the drive is just another object that can be picked up by the wrong hands.

None of these tools is broken. They are simply built for a different problem — keeping things from being lost — not for the problem of keeping things from being seen. Loss and exposure are different risks, and tools built for one do not solve the other. The repair counter teaches this lesson brutally: the risk is not that your phone breaks. The risk is that someone else holds it while it is whole.

Not Being Handed Over

The answer is not a better promise from the repair shop. The answer is to stop putting the things that must never be seen into the device you keep handing over.

"Not being seen" has to start with "not passing through anyone's hands." The things that matter most should live somewhere that no repair technician, no stranger at a counter, no future owner of a traded-in phone will ever hold: on a medium that is not connected to anything, kept by professionals under a process designed around a single idea — that no one person ever handles it alone, and no one needs to know what is inside it.

Here is what that process looks like when it is done properly. The item is numbered. It is sealed. Two people verify it together, so the chain of custody is never a single pair of hands. The people receiving it do not open it, do not read it, do not need to know anything about it — intake is numbering and photographing, nothing more. Twice a year, the seal and the appearance are checked visually and photographed, with zero contact: the item itself is never opened, never handled beyond the check. Any closer inspection happens only if you have given written permission in advance. That is the whole arrangement, and it is the opposite of the repair counter: there, one stranger holds everything alone; here, no one holds anything alone, and no one holds the contents at all.

Seneca advised that we should arrange our affairs so that we are not at the mercy of fortune — or, in this case, at the mercy of a stranger's curiosity. You cannot control who repairs your phone next year, or who buys your old one, or what a bored employee does with an unlocked screen. You can control whether the things that must never be seen are on that phone in the first place.

The Curtain You Build Yourself

There will always be a repair counter. Phones break; that is what they do. The question is not how to make the counter safe — it cannot be made safe, because its whole function requires total access. The question is what you put on the other side of it.

The people who sleep well are not the people who found a trustworthy repair shop. Trustworthy is a person, and people change. The people who sleep well are the people who separated the two problems: the phone is a tool, and it can be handed over, repaired, sold, replaced; the things that must never be seen live somewhere else entirely, somewhere no handover ever touches.

Build that separation, and the repair counter loses its power over you. Hand over the phone. Let them fix the glass. Your life is not in it — because you never put the part that must never be seen into a device that strangers hold. It is sealed, numbered, checked by two people together, and kept by professionals whose process does not require them to know, or to look, or to promise. It simply makes looking impossible.

That is the only curtain that works: not a promise hung over the counter, but a separation built before you ever reach it.