Skip to content
Skip to main content
Mobile Devices & Apps Technical Explainer

Could evidence exist on the phone but not in the cloud?

Yes. Drafts, notifications, cache, downloaded files, app databases and recent system records may never upload or may be excluded from provider storage.

Synchronisation can be absent or incomplete

Backup may be disabled, old, interrupted or storage-limited. The phone may have been offline, and some services deliberately retain data only locally. Recent activity after the last backup can therefore be unique to the handset.

Compare rather than substitute sources

Record backup dates, settings, connectivity and app behaviour. A cloud response with no data does not make device preservation unnecessary. Conversely, local presence may result from automatic receipt or restoration and does not prove deliberate creation or viewing.

Synchronisation explains how local and remote states can diverge and later converge.

Key takeaway

Preserve handset and cloud independently because either can contain unique evidence and neither source's absence resolves what happened in the other.

Reference: MDA-066Mobile Devices & Apps