Even After Emptying the Trash, Your Data Is Still There
You "delete" a file on your computer or smartphone and empty the trash. The data is completely gone now - or is it? In most cases, the data is still sitting on your storage device.
What "Delete" Really Means
When you delete a file, the OS simply marks the space that file occupied as "available to be overwritten with new data." The file's contents aren't actually erased.
A library analogy makes this easy to understand. Removing a book's card from the library catalog doesn't remove the book from the shelf. "Deleting" is the act of discarding the catalog card, not burning the book itself.
That's why, shortly after deletion, data recovery software can often retrieve the file. Until the space is overwritten with new data, the original data remains on the storage device.
SSDs and HDDs Work Differently
HDD (Hard Disk Drive)
On an HDD, deleted file data physically remains until overwritten by new data. Recovery software has a high chance of retrieving it, and specialized services can sometimes partially recover data even after overwriting.
SSD (Solid State Drive)
SSDs have a feature called "TRIM." TRIM is a mechanism where the OS notifies the SSD about deleted data regions, and the SSD internally clears those regions. On SSDs with TRIM enabled, recovery becomes difficult after some time has passed since deletion.
However, since TRIM execution timing depends on the SSD's firmware, recovery may still be possible on SSDs if attempted immediately after deletion.
"Deleting" on Smartphones
Smartphone storage uses the same flash memory as SSDs. Furthermore, recent iPhones and Android devices encrypt the entire storage. For a deeper look at how device encryption protects your data, see our dedicated article.
- iPhone: When a file is deleted, its encryption key is destroyed. Even though the data remains on storage, it's unreadable without the encryption key
- Android: Storage encryption has been mandatory since Android 10. Like iPhone, data is made effectively unrecoverable by destroying the encryption key
When you "factory reset" your smartphone before selling it, the encryption keys are destroyed, making the data on storage virtually unrecoverable.
When You Truly Want to Erase Data
- Cryptographic erasure: Encrypt the entire storage, then destroy the encryption key. The most reliable and fastest method
- Overwrite erasure: Overwrite the entire storage with random data. Effective for HDDs, but old data may remain in SSD reserve areas
- Physical destruction: Physically destroy the storage device. The most certain method, but the device can't be reused
When disposing of a computer, we recommend performing cryptographic erasure or physical destruction rather than simply deleting files. If your files are synced to the cloud, remember that copies may still exist on remote servers - see our guide on cloud storage security for details.
Summary
"Deleting" only removes the card from the catalog - the book remains on the shelf. Recovery is easy on HDDs, and even on SSDs it may be possible depending on TRIM timing. Smartphones are relatively safe thanks to encryption, but when disposing of a computer's HDD, don't forget cryptographic erasure or physical destruction. Even after local deletion, traces of your activity may persist online - you can check what information your connection reveals by visiting IP確認さん for an IP address check and browser fingerprint analysis. Learn more about your digital footprint.