Decide what a household device should do after sign-out

Build the check with harmless data

Use a fictional note and a sample attachment. Sign out, reopen the app, use the back button and look in the downloads folder. Record which items remain available. For a device shared with visitors, remove the sample files and repeat the check in the guest session. Create one fictional note and download one harmless attachment. Sign out deliberately. Reopen the app, revisit the previous page and try to load a fresh record. Then check files, notifications and browser history as separate surfaces.

Interpret what you see

An old page might remain visible even when fresh server requests are denied. A locally downloaded attachment may remain accessible independently of the session. Record which surface contains which information. If another adult signs in on the same device, verify that new requests use the new account and cannot retrieve the previous adult’s private sample.

Prepare the handover

Remove local copies through the device’s normal controls and use a separate guest profile where available. Repeat the test after locking and unlocking the device. If you cannot achieve the separation needed for a visitor, share a limited document on another device instead of handing over the household session.