Skip to content
Skip to main content
Mobile Extractions Technical Explainer

Why might an application timestamp differ from the phone timestamp?

The app may use server time, device time, another zone, delayed synchronisation or a different event stage.

Compare clocks and events together

A handset can time local draft creation while the service times acceptance and a recipient times download. If the device clock is fast, local and server values can diverge legitimately. UTC/local conversion or inconsistent reader handling can create a fixed difference, including daylight-saving offsets.

Delay can reveal the process

Offline creation, later upload, backup and second-device sync can separate related times. Build a comparison of source, raw value, zone, event, display and known clock offset. Validate an unexpected field or conversion rather than assuming manipulation or that provider time necessarily means the same event.

Key takeaway

Explain which clock and processing stage produced each timestamp before treating a difference as contradiction or tampering.

Reference: MEX-057Mobile Extractions