Skip to content
Skip to main content
Mobile Extractions Technical Explainer

What is the difference between created, modified, accessed and received time?

They describe different technical events whose meaning depends on the file system, database, application and particular copy.

File labels do not describe content universally

Creation may mark when a downloaded or restored copy appeared on this storage, not original authorship. Modification can reflect editing, sync or metadata rewrite, and a database file can change because of another row. Access updates may be disabled or caused by indexing, backup, security tools or examination rather than human viewing.

Application receipt has its own stages

A message may be received by the provider, downloaded to the handset, inserted into a database or displayed at different times. Photographs can have capture, file, import and cloud times; downloads can have visit, start and completion. Identify the exact source field before translating a label into chronology or conduct.

Key takeaway

Describe the system event behind each time label and avoid treating file or app metadata as a universal record of human action.

Reference: MEX-046Mobile Extractions