Android phones backup a lot of stuff automatically through Google. GPlus will also do automatic backups as he takes pictures. He can also use Dropbox with their app.
For backing up other data like apps and settings, Michael will have to root the phone and use Titanium Backup. It's perfectly safe and legal to do this. Rooting the phone will just give him administrator access so he can do a full backup. The chatroom says that ADB Backup does full phone backup. It makes an image of the phone, but doing this is non trivial.