Why mobile evidence is different
Phones combine many data types: messaging apps, SMS, call logs, photos, location artefacts and app data. Messaging apps each store data differently, and some content can be deleted, edited or set to disappear. Extracting and interpreting this material requires care and the right tools.
Because phones are personal devices, proportionality and privacy also matter. A targeted approach that collects what is relevant, while respecting personal and privileged material, is usually the right balance.
From extraction to review
The process typically runs: forensic extraction of the device, processing and normalisation of the messaging data, conversion into a reviewable form such as RSMF, then loading into a review platform alongside other documents. At each stage the original is preserved and the steps are recorded.
Done properly, a reviewer can read a WhatsApp or SMS conversation in sequence, with participants and timestamps intact, and search across it alongside the rest of the document set.
Common pitfalls
Screenshots and manual copies are a frequent source of trouble: they lose metadata, can be incomplete, and are easy to challenge. Relying on a single participant's copy of a conversation can also be risky if other participants' devices tell a different story. A defensible extraction avoids these problems.
Key takeaways
- Phones hold diverse, fragile data that needs careful extraction.
- The reliable path is extraction, processing, conversion, then review.
- Screenshots and manual copies lose metadata and are easy to challenge.
- Proportionality and privacy should shape how much is collected.
Frequently asked questions
Can deleted messages be recovered?
Sometimes. Recoverability depends on the device, the app and how the data was stored. A forensic extraction gives the best chance and records what was and was not recoverable.
Are screenshots good enough?
Rarely. Screenshots lose metadata and are easy to dispute. A forensic extraction produces far more reliable evidence.
Can you review chats alongside emails and documents?
Yes. Once chat data is processed and converted, it can be reviewed in the same platform as conventional documents.
Discuss your matter in confidence
Speak to an eDiscovery specialist about forensic collection, processing and review support for your case.
Request a Confidential Consultation