A surprisingly large amount of data can often be recovered from a mobile phone — depending on the phone type, its condition, how it was used, and whether data has been overwritten or encrypted. Here’s a structured overview.

📱 Data That Can Often Be Recovered

✅ User Data

  • Contacts and address book
  • Call logs (incoming/outgoing/missed)
  • SMS/MMS messages
  • Chat messages (WhatsApp, Telegram, Signal, etc.) — sometimes including deleted ones
  • Emails (cached copies)
  • Notes and documents
  • Calendar entries
  • To-do lists

✅ Media

  • Photos and videos
  • Audio recordings
  • Voice notes
  • Screenshots
  • Thumbnails (even when original photos are deleted)

Even deleted media may be recoverable if not overwritten.

✅ App Data

  • App databases
  • Chat histories
  • Saved drafts
  • App login tokens
  • Cached files
  • Download history
  • App usage logs

✅ Location & Movement Data

  • GPS history
  • Location tags in photos
  • Maps search history
  • Travel routes (from navigation apps)
  • Nearby Wi-Fi networks previously connected

✅ Internet & Network Data

  • Browser history
  • Saved passwords (if not securely encrypted)
  • Autofill form data
  • Cookies and session data
  • Download history
  • Wi-Fi connection history
  • Bluetooth pairings

✅ System & Device Data

  • Device identifiers (IMEI, serial number)
  • SIM card info
  • Network logs
  • Crash logs
  • Usage timestamps
  • File system metadata (when files were created, opened, modified)

🗑️ Deleted Data — Can It Be Recovered?

Sometimes yes — sometimes no. It depends on:

  • Whether storage sectors were overwritten
  • Whether the phone uses full-disk encryption
  • Whether a secure wipe was done
  • How long since deletion
  • Whether TRIM/garbage collection has run (common on modern phones)

Modern iPhones and newer Androids with encryption make deleted data much harder to recover than older devices.

🔐 Locked vs Unlocked Phones

Unlocked phone

Much more data is accessible.

Locked phone

Recovery depends on:

  • Encryption status
  • OS version
  • Lock type (PIN vs password vs biometric)
  • Forensic tools available

Modern locked, encrypted phones are very resistant to full data extraction.

☁️ Cloud Data (Often Overlooked)

Even if phone data is gone, cloud backups may still contain:

  • Photos
  • Messages
  • Contacts
  • App backups
  • Drive files
  • Email archives

Sources:

  • iCloud
  • Google account
  • App-specific backups
  • Carrier backups

🧪 Professional Forensic Recovery Can Sometimes Extract

  • Fragmented deleted files
  • Database remnants
  • Hidden partitions
  • App artifacts
  • Timeline reconstruction
  • Partial message records

But success varies greatly with device age and security features.