Active Incident? 24/7 Response →
SleuthX

For Attorneys

Recovering Deleted Photos & Location Data for a Family-Law Case

Photos and location can corroborate a timeline a witness won't — when they still exist. The honest windows, why location data lives on the device, and the cross-examination traps in EXIF.

All articles·8 min read·June 21, 2026

The short answer

Photos and location data can corroborate a timeline a witness won't — but only when they still exist, and the windows are short. A deleted photo is easy to recover inside the trash window (30 days on iPhone, 60 in Google Photos if backed up) and usually impossible after it, because flash storage reclaims the space. Detailed location history mostly lives on the device, not at Apple or Google, so it is not a provider subpoena. And photo location metadata is frequently stripped when an image is sent. This page is the attorney's version — the evidentiary angle — and is informational, not legal advice. For the consumer how-to on the recovery mechanics, see how to recover deleted photos on iPhone and Android.

Deleted photos: a real but closing window

On iPhone, deleted photos sit in Recently Deleted for 30 days; in Google Photos, Trash holds them 60 days if backed up, 30 if not. Inside that window, recovery is a few taps. After it empties with no backup, the odds fall toward zero: phone storage is flash memory, and TRIM and garbage collection wipe freed blocks quickly, so the underlying data a tool would need is typically already overwritten. The evidentiary takeaway is timing — preserve early, because the window is a deadline, not a suggestion. An examiner can sometimes reach more than the built-in tools when a device is intact and was not reset, but no one can recover what the chip has already overwritten.

Location data: device evidence, not a provider subpoena

This is where counsel most often plan wrong. iOS Significant Locations is stored on the device, encrypted, and not something Apple can be subpoenaed for— it is reachable only by lawful extraction of the phone itself. Google moved its Timeline on-device in December 2023, with location history defaulting to an auto-delete window and no longer visible on the desktop web. The practical consequence: the rich, granular location history you want is device evidence, obtained through lawful access to the phone, not a subpoena to Apple or Google. Plan the strategy around the device.

The EXIF trap

A photo's embedded EXIF GPSdata can place where it was taken — but be careful with it. iMessage, many social platforms, and messaging apps routinely strip location metadata when an image is sent or uploaded. So a forwarded copy with no GPS proves nothing about where the photo was actually taken, and the absence of metadata is not evidence of anything. Authenticate the original file from the source device, where the metadata is intact, rather than a copy that passed through an app that scrubbed it.

Making it hold up

Recovered photos and location data are only as good as their authentication — the same FRE 901/902 gate every digital exhibit has to pass (see authenticating digital evidence in court). When photos or location will be contested in a divorce or custody matter, a certified exam preserves the originals and the metadata defensibly. Our forensic phone extraction for divorce and digital forensics for divorce pages explain how that is done so the evidence survives challenge.

Sources

  1. Apple Support, Recover deleted photos and videos (30-day Recently Deleted window). https://support.apple.com/en-us/124460
  2. Apple Support, Manage your privacy and Location Services (Significant Locations). https://support.apple.com/en-us/102515
  3. Google, Updates to Location History and new controls coming to Maps (on-device Timeline, December 2023). https://blog.google/products/maps/updates-to-location-history-and-new-controls-coming-soon-to-maps/

Related services

Meet Your Practitioner

Quinnlan Varcoe

Founder & CEO

GIAC-certified · 15 industry certifications

With operational experience across Fortune 50 security programs and the defense industrial base, Quinnlan founded SleuthX in 2022 to provide clients with the caliber of expertise typically reserved for the largest enterprises. Her work in threat intelligence and digital forensics has earned the trust of 26,000+ cybersecurity professionals who follow her analysis.

“26,000 professionals follow my work because I say what others won't — and I can back it up technically.”

Fortune 50 BackgroundDefense IndustryThreat IntelligenceDigital PrivacyIncident Response
Quinnlan Varcoe, Founder & CEO

Photos and location in family law: quick answers

Certified Expertise

GIAC · AWS · Splunk · CompTIA

Transparent pricing

Trusted by partners across the practice

DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management
DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management