Could isolating a device cause evidence to be lost?¶

Yes. Isolation can prevent remote change while interrupting live sessions, transfers, temporary content and access that depends on the current powered state.

What disconnection may protect¶

It can reduce incoming messages, synchronisation, remote commands and wiping. Those risks are strongest where another user knows about recovery or remote management is active.

What disconnection may remove¶

Applications can react to lost connectivity, downloads may stop and short-lived content may expire. Settings changes create logs and timestamps. Signal blocking can increase battery use; power loss may restart an unlocked device into stronger encryption.

Record current power, lock state, connections, visible activity and the evidence thought volatile. Compare specific methods - airplane mode, SIM removal, shielding, shutdown - because each has different effects. Leaving the device connected also permits change, so doing nothing is not neutral.