Unless you use an application such as iwipe people can extract data even after a restore. I know I did a complete restore and imaged the phone and was able to locate pictures and files, iwipe is a good choice as it works I've tested that as well. Restore is totally useless for security.