What does deleted mean in a mobile extraction?¶

It is a technical classification that may describe a database state, broken reference or recovered remnant; it does not automatically prove deliberate deletion by a user.

Ask deleted from what¶

An item may be flagged, hidden or expired in a database, removed from an index, absent from the active interface, or recovered from a journal or storage remnant. The handset may lose it while a provider or backup retains it. Its content time is not necessarily a deletion time.

Establish mechanism and actor¶

User action is one possibility alongside retention rules, sync from another client, account removal, updates, cleanup, optimisation or remote action. Examine audit events, access, surrounding records, participant copies and provider history. If the source supports only a no-longer-active state, report that narrower fact.