<p>A method for identifying a device reset of a mobile communications device is presented. An identifier associated with the mobile communications device is caused to be sent to a server by a security program on the mobile communications device. Using the security program, a determination of whether there has been a device reset is made. If there has been a device reset, the identifier and an indication that there has been a device reset is caused to be sent to a server, where the security program is not erased during the device reset.</p>