Could rooting or jailbreaking affect the reliability of the device?¶
Yes. Modification can weaken standard assumptions about permissions, logs, timestamps and system integrity, but it does not invalidate every artefact automatically.
Identify the material effect¶
Privileged tools may alter files, hide activity, disable controls or broaden application access. Malware and remote access may also become more plausible. A specialist should assess packages, privileges, integrity, configuration and whether changes could affect the particular evidence relied upon.
Do not restore or update the device during routine handling, because that creates further alteration.
Corroborate the disputed proposition¶
Ask what changed, when and whether it bears on the artefact or event in question. Provider, cloud, network, linked-device and witness evidence can confirm or challenge handset records independently.
Distinguish capability from proof: the presence of powerful tools does not show that evidence was fabricated or deleted. Conclusions should match the demonstrated effect.
Key takeaway
Treat system modification as a reason for targeted integrity analysis and independent corroboration, not as automatic proof that all handset evidence is unreliable.