First sorry for the looooong read:
I'm known at work for being pretty tech savvy so one of my co-workers came to me a few days ago saying their friend offered to sell them their old iPhone 4 for $30. The catch was that friend could not remember the passcode to unlock the phone. After having tired too many times to enter it the phone displayed that it was disabled and must be connected to iTunes to be restored. So I offered to do it for him.
All went without issue, downloaded and installed iOS 6.1, setup the phone as a new device (in an effort to prevent any of my personal data from being on the phone somehow). This is where my confusion and concern comes in. I did not do anything to the phones settings, did not log into my accounts (neither email nor iTunes) NOTHING, just (tried to) set it up as if it were brand new.
After giving the phone back to him I got a text a few hours later from this co-worker asking me what the password for the apple ID is so he could download some apps and stuff. I informed him I could not set that up because it has to be linked to his email and back account, at which point he text me back saying that it was currently logged in with my email but anything he did asked him to enter a password.
Very confused, and a bit annoyed with myself for letting such a thing happen I instructed him on how to log me out and setup his own Apple ID. Also being the paranoid person I am I immediately took security precautions...not that I suspect this person would try to screw me over by doing anything with my account, but because I do not want anyone to have access to such accounts.
Anyway, I began thinking to myself, "how can it be logged in with my Apple ID? I never entered that info on his device nor did I access wi-fi" (the phone was also not activated on a cellular network you see), so for curiosity sake I grabbed my own old iPhone 4 out of a drawer and decided I needed to test this and see what's going on. Is my co-worker trying to phish info from me or does Apple just suck?
So here I am a few hours later just having done to my old iPhone 4 what I did to his and what did I find out? Apple did indeed automatically log me into iTunes. I have no idea how or why this happened but it is a bit of a concern. Luckily he could not do anything with my account cause he did not have, nor did I give him, my password so that is a relief.
Can anyone shed some light on this situation? Why does it automatically log my apple ID in when setup as a new device? The device in question wasn't even associated to my account!
I've learned a lesson from this, next time check more vigilantly that none of my personal info is on the device. Anyway, just sharing this little story to get some opinions here. Hopefully someone can tell me what happened, and possibly how to prevent it in the future.