What type of organisation are you part of that you need to guard the OpSec (operational security) of? Are you sure you don’t mean PerSec (personal security)?

That said, please try selling your item in EBay before using Facebook, like, it’s not great, but Facebook collects so much more data, even on an empty device. Iirc they need to ‘verify’ your identity with an ID document.