Computer Forensics Lab, e-discovery.uk
e‑discovery.uk
Computer Forensics Lab eDiscovery
§ Guide

Android Messaging SMS RCS And Messaging Apps

This guide answers where Android messages live, why the messaging app matters, and what deletion leaves behind for UK litigators.

Ref · E-D · 2026 · §LIBClass · ConfidentialJuris · England & WalesStatus · Active

Guide · 19 pages · 25 min read · Published 2026-09-02

UK lawyers handling electronic evidence face a specific technical obstacle on Android devices, where no single Messages app exists. Because the active messaging app determines where SMS, RCS, and third-party conversations live, identifying the specific application in use is essential for e-discovery and disclosure. Prepared by the Computer Forensics Lab e-discovery team, this material provides legal practitioners with a practical framework for locating evidence across phone storage, Google accounts, manufacturer backups, counterpart devices, and carrier records. It examines what survives deletion within local databases, addresses the technical limits of end-to-end encryption, edits, and sender attribution, and details how to recover and prove message threads effectively. Legal teams will find worked examples, red flags, and structured checklists alongside suggested wording for instructions and interrogatories for clients, opponents, and forensic providers. By outlining common mistakes, technical boundaries, and key questions for digital forensic experts, the text ensures practitioners can reliably navigate Android messaging evidence from initial analysis through to formal deployment in legal proceedings.

Share
LinkedIn X / Twitter WhatsApp Email

Read this guide on your phone, open the PDF reader with the full text, browse guides by topic or go back to the full PDF library.

§ Credit and source

Published by Computer Forensics Lab on 2026-09-02. Original material of the practice, free to read, cite and download. The authority behind this subject is Forensic Science Regulator Code of Practice, digital forensics, which you should read alongside this guide. See every guide's author and source.

§ Read Android Messaging SMS RCS And Messaging Apps

Download the PDF

Prefer a PDF that matches this page exactly? Download the current text as a PDF, generated from the current wording of the guide, including any later corrections.

Android Messaging SMS RCS And Messaging Apps

ANDROIDMESSAGING · A GUIDE FOR UK LAWYERS Android Messaging: SMS, RCS and Messaging Apps Where Conversations Live on Android, Why the Messaging App Matters, and What Deletion Leaves Behind COMPUTER FORENSICS LAB

§ ABOUT THE AUTHOR PREPARED BY COMPUTER FORENSICS LAB E-DISCOVERY TEAM

§ CONTENTS In this guide 01 Executive summary 02 The problem in plain English: no single Messages app 03 SMS, RCS and the messaging app in use 04 Where Android messaging lives 05 What survives deletion 06 Encryption, edits, attribution and honest limits 07 Deployment: recovering and proving conversations 08 Source architecture: where else the evidence lives 09 Worked examples 10 Common mistakes and technical limitations 11 Questions to ask · Suggested wording 12 Checklist and red flags · When to involve a digital forensic expert 13 Frequently asked questions 14 Glossary · References · Disclaimer · How a specialist laboratory can assist

§ 01 · ORIENTATION Executive summary The headline point: Android has no single Messages app, so SMS and RCS are handled by which ever messaging app is in use, each storing them differently, alongside the third-party apps, which means the messaging app must be identified because it decides where the messages are, while deleted messages very often survive in databases, backups, the Google account and counterpart devices.

§ 02 · FIRST PRINCIPLES The problem in plain English: no single Messages app

§ 03 · SMS, RCSANDTHEAPP SMS, RCS and the messaging app in use COUNTERPARTS

§ 04 · WHEREITLIVES Where Android messaging lives

§ 05 · WHATSURVIVESDELETION What survives deletion

§ 06 · ENCRYPTION, EDITSANDATTRIBUTION Encryption, edits, attribution and honest limits

§ 07 · DEPLOYMENT Deployment: recovering and proving conversations

§ 08 · THEWIDERMAP Source architecture: where else the evidence lives EVIDENCE THE GOOGLE MANUFACTURER / COUNTERPART CARRIER DELETED / PHONE ACCOUNT LOCAL BACKUP DEVICE RECORDS RECOVERABLE

§ 09 · IN THE WILD Worked examples EXAMPLE1 · THEMESSAGESTHATWEREINADIFFERENTAPP EXAMPLE2 · THEDELETEDRCSTHREADANDTHEGOOGLEBACKUP EXAMPLE3 · THETHREEAPPSANDTHEONETHATWASTRULYGONE

§ 10 · WHEREITGOESWRONG Common mistakes and technical limitations Common mistakes Technical limitations

§ 11 · INTERROGATORIES & DRAFTING AIDS Questions to ask · Suggested wording Ask your client Ask your opponent Ask your e Discovery / forensic provider SUGGESTED WORDING · INSTRUCTIONFORANANDROIDMESS AG INGANA LY SIS

§ 12 · QUICK CONTROL Checklist and red flags · When to involve a digital forensic expert The Android messaging checklist Red flags When to involve a digital forensic expert

§ 13 · COMMON QUESTIONS Frequently asked questions Where are the text messages on an Android phone? What is RCS, and does it change anything? Someone deleted their messages. Can they be recovered? The messages were end-to-end encrypted. Doesn't that stop recovery? Do we need to look at the third-party apps too? Does a message prove who sent it?

§ 14 · REFERENCE Glossary Sources and authoritative references DISCLAIMER

§ HOW A SPECIALIST LABORATORY CAN ASSIST Working with Computer Forensics Lab Speak to a forensic examiner, not a salesperson. INSTRUCTTHELAB NEWENQUIRIESEMAILE - DISCOVERY

§ Related documents
Instruct the practice

Bring us in early. Defensibility is built, not retrofitted.

Whether you are responding to a regulator, preparing for disclosure, or scoping an internal investigation, start the chain of custody with a short, confidential conversation.

Open a confidential matter→+44 (0)20 7164 6971Direct lineinfo@e-discovery.ukEncrypted
WhatsApp