Clearing out user histories isn’t enough to clean the device of that data.