Why does the device model and operating-system version matter?¶
The device model and operating-system version can determine what evidence exists and whether it can be accessed.
What this means¶
Two phones that look similar may behave very differently.
A newer model may use stronger encryption, different hardware security and a different storage structure.
An older device may support artefacts that no longer exist on current versions.
The operating-system version also controls features, permissions, logging, backups, notifications and application behaviour.
A software update may move data, remove old records, change database formats or strengthen security.
Security patches matter as well.
A specialist method that works on one version may fail on another because a vulnerability has been fixed.
Manufacturer customisation can also affect Android devices.
Samsung, Google, Motorola and other manufacturers may use different settings, apps, storage locations and security layers even where the underlying Android version is similar.
The model can also reveal hardware capabilities.
It may show whether the device supports dual SIM, eSIM, memory cards, secure hardware, particular sensors or specific network bands.
Also record the operating-system version and, where visible, the security patch level.
An update may change evidence, alter compatibility and reduce available examination options.
The operational takeaway is: device model and software version directly affect preservation, access and interpretation. Record them accurately and avoid updates or restarts that may change the evidential opportunity.
What to check or do next¶
- Record the exact model number where possible, not just the brand name.
- Do not update the device merely to make it easier to use.
Evidential limits¶
Do not assume that a provider or specialist can recover the same material from every handset.