Since 20 June 2025, any phone newly sold in the European Union must receive operating system and security updates free for at least five years, counted from the day the last unit of that model leaves the market rather than from its launch. Security patches have to arrive within four months of release. Spare parts must stay available for seven years, and batteries have to hold 80 percent of their capacity after 800 charge cycles.
Nigeria has no equivalent rule, and that difference has a consequence worth understanding before you buy anything. The same manufacturer, sometimes the same handset, can carry a five-year update guarantee in Berlin and no guarantee at all in Lagos, because the obligation attaches to where the phone is sold rather than to the company that made it.
Two years was the budget-phone norm, and Nigeria still lives there
Before the regulation, phones below roughly €300 typically shipped with two Android version upgrades and two to three years of security patches, and some launched with no guaranteed Android upgrade at all alongside two years of patches. That was the standard across the budget segment generally, not one brand’s failing.
The European rule lifted that floor for European buyers. Elsewhere the floor stayed where it was, and commentators covering the regulation flagged the obvious risk at the time, which is that manufacturers might simply keep cheaper models out of the EU and continue selling them with shorter support in markets that don’t demand more.
The mismatch matters more here than in Europe for a straightforward reason. Nigerians keep phones longer. A device bought in 2022 is still somebody’s main phone in 2026, running bank apps and receiving OTPs, two years past whatever patch commitment it came with.
Check your security patch date, because it tells you the truth
There’s one number on your phone that answers this question directly, and almost nobody looks at it. Open Settings > About phone and find the Android security update field, which shows the date of the most recent security patch level your phone has received. On some HiOS and XOS builds it sits under Settings > Security and privacy instead, and searching “security update” in the Settings search bar will find it either way.
Google issues Android security patches monthly. If your phone’s patch date is within the last two or three months, you’re still being supported. If it reads a date from last year or earlier, your phone has stopped receiving security updates, and no amount of checking for updates will change that, because nothing is being sent.
That’s a different thing from your Android version, which is what people usually check. A phone can sit on an older Android version and still be receiving patches, which is fine, or be on a recent version with a patch date eighteen months stale, which isn’t.
What actually happens when the patches stop
Nothing visible, which is the problem. The phone keeps working, apps keep updating from the Play Store, and the only change is that newly discovered vulnerabilities in Android itself never get closed on your device.
For a phone used mainly for calls and WhatsApp, the practical risk is modest. For a phone running your bank app, holding your BVN-linked accounts and receiving every OTP you use, the calculation is different, since the vulnerabilities that matter are precisely the ones that let something read what’s on screen or intercept a message.
Some protection continues regardless. Google Play Services updates independently of the system and covers a fair amount, and Play Protect keeps scanning apps. That softens the drop rather than removing it, so an unpatched phone isn’t a crisis, it’s a phone you should be more careful with, and one worth planning to replace rather than replacing tomorrow.
Questions worth asking before you buy
- How many Android version upgrades does this model get, stated as a number rather than a promise of ongoing improvements.
- How many years of security patches, which is the more important figure of the two.
- When did this model launch, since a phone released two years ago has already spent most of its support window.
- What is its current security patch date, checkable in Settings on any display unit in the shop.
That fourth check is the useful one because it can’t be argued with. Pick up the demo unit, open Settings, read the date. A phone sitting on the shelf with a patch date from last year has been in stock a long time and is further through its life than the price suggests.
Buying a newly launched model rather than last year’s discounted one buys you more of the support window, which changes the arithmetic on what looks cheap. A phone costing 30 percent less with a year of support left is not the bargain it appears to be, and this belongs alongside the other traps in our piece on the buying mistakes that waste Nigerians’ money.
Where this leaves a secondhand phone
A three-year-old flagship at a good price is often a genuinely better phone than a new budget model, and the update question is the counterweight to that. The flagship may be out of support while the new budget phone still has a year or two left, so the comparison isn’t only about processor and camera.
Check the patch date before paying, the same way you’d check the IMEI, and treat it as part of the standard inspection covered in our guide to the checks worth running before buying a refurbished flagship in Nigeria. Samsung and Google now commit to seven years of updates on their recent flagship lines, which means a used Samsung flagship can carry more remaining support than a brand new budget phone, and that shifts the value calculation considerably.
The broader trend of budget hardware closing the gap on midrange is something we looked at in why budget Android phones caught up with midrange models, and software support is the dimension where that gap has stayed widest. iFixit’s assessment of the European rules called five years a reasonable minimum lifespan for a phone, and there’s no reason a Nigerian buyer should aim lower than a German one.
If your phone is out of support and replacing it isn’t realistic right now, the sensible middle ground is reducing what sits on it. Move banking to a device that’s still patched if you have one, keep the number of installed apps down, and stick to the Play Store. A phone past its patch window can still serve you well for years, and our walkthrough of what actually speeds up an older Android phone covers getting more out of it in the meantime. The full text of the European rules sits in Regulation (EU) 2023/1670 if you want to see exactly what buyers elsewhere are now guaranteed.
