We are more glued to our phones now than ever before. The modern smartphone is a miniature Internet-enabled computer, capable of keeping you in touch with family and friends no matter the distance. People are storing increasing amounts of data on their phones, from text and voice messages and contacts to pictures, videos, and music. Of course, being so small and so frequently-used, phones are vulnerable devices. They can be dropped onto a hard surface or into a pool, lake, toilet, etc. They can be stepped on or run over. Water can get spilled on them. Or they can just die on you. If you’ve lost critical data on your smartphone, the phone data recovery experts at Gillware can help you.
Where Does Data Live on Your Phone?
Compared to computers, a smartphone’s inner workings are a mystery to most people. Generally, the data on your phone can live in two places. Connected to your phone’s motherboard is an eMMC or eMCP chip. These are a special kind of NAND flash memory chip ideal for devices such as smartphones. Smartphones also have a hidden slot for a microSD card. Not all smartphones come with microSD cards preinstalled, but they are somewhat easy to install, remove, and replace. It only takes a minute or so of simple disassembly.
Your phone’s settings determine which data goes where. If your phone has a microSD card in addition to its embedded flash memory chip, your phone may send all of its photos and videos to the SD card and use its eMMC card for data such as contacts, text messages, etc. But unless you poke around in your phone’s internal storage settings, it’s not immediately apparent which data goes where. Regardless of whether or not there is a microSD card inside your phone, your phone appears to you and your computer to be a single storage device.
What Are eMMC and eMCP Chips?
Inside a USB flash drive or solid-state drive are the NAND chip(s) and a controller chip. The chips are soldered to a printed circuit board. All of the data inside the drive lives on the NAND chips, but not in a form you would recognize. When data passes through the controller chip, the controller organizes the data into something you can make sense of.
Inside your phone, however, is a different type of NAND flash memory chip. The eMMC, or embedded multimedia card, has its controller integrated into the chip itself. You’ll never find an eMMC chip inside a solid-state drive; their performance is far slower than normal NAND chips. But eMMC chips are preferred for phones and more affordable models of tablet.
eMMC chips are cheaper to produce than normal NAND chips, and have a size advantage as well. An eMMC chip frees up space on the PCB and allows the manufacturers to work with even smaller form factors. And an eMCP chip frees up even more space than an eMMC chip, because the RAM chip is integrated into it as well as the controller. While still slower than the NAND chips in your SSD, eMCP chips offer improved performance over eMMC chips.
Mobile Phone Data Recovery
In the vast majority of mobile phone data recovery cases, the phone has to be completely disassembled. This is the only way to get at the eMMC or eMCP chip. After the phone has been stripped down, our mobile phone technicians can remove the chip. The chip can then be popped into a chip reader and imaged. Because the eMMC chip has a controller integrated into it, this is a simpler process than the raw NAND flash memory dump used for some other solid state memory recovery situations. Reading an eMMC chip (with the proper tools) isn’t much different from reading an SD card.
If, for some reason or another, the memory chip cannot be removed from the motherboard, our engineers can use the JTAG data extraction method. The JTAG method allows data to be read from the memory chip without removing the chip from the phone’s motherboard. Wires are connected to specific contact points on the motherboard that lead directly into the chip. Many phone manufacturers disable JTAG access before the phones are assembled and shipped off. However, when it can be used, it is a powerful data recovery technique.
Salvaging data from mobile phones can be tricky. Every model of phone is built and programmed just a little differently. Our mobile phone technicians often test data recovery methods on identical “dummy” models. At Gillware, our data recovery experts use forensics tools such as Cellebrite in conjunction with our own proprietary data recovery software tools to access and salvage data from smartphones.
Your phone isn’t formatted for Mac or Windows (unless your phone uses Microsoft’s Windows 10 Mobile O/S). Rather, your phone has a filesystem and operating system of its own. An iPhone uses the iOS operating system, while many other smartphones use Google’s Android operating system. The Android O/S is open-source, so there are many variants of it for smartphones and other devices.
Android Data Recovery
This phone had suffered severe damage, but our data recovery experts were able to remove its eMMC chip and recover its contents.
Android is based on the Linux kernel, so Android mobile devices have Linux filesystems. There are a wide range of Linux filesystems due to the open-source nature of Linux. Our mobile phone data recovery technicians must be well-versed in all flavors of Linux OSes, from Btrfs to ZFS. It’s common for Android eMMC chips to be formatted with Ext4, or with F2FS, a filesystem designed with the unique characteristics of NAND flash memory chips in mind.
While in many cases the phone has died, there are many other cases in which our clients have accidentally factory reset their phones and lost their personal files. As long as the phone isn’t self-encrypting, data recovery in this situation is similar to recovering data from a hard drive after an accidental reformat or system restore. In many mobile phone data recovery cases, our clients are after text messages and contact lists. These are typically stored in a SQLite database. Recovering text messages and presenting them in usable format requires using SQL queries and Unix time conversion to parse them into a spreadsheet humans can easily read.
iPhone Data Recovery Service
While the technology behind the iPhone isn’t so much different from Android phones, the filesystem architecture is very different. Whereas Android mobile phones use open-source Linux filesystems, iPhones and iPads stick with Apple’s proprietary HFS+ architecture. Our data recovery technicians are very well-acquainted with Apple filesystems and are well-versed in recovering lost, deleted, or corrupted data from these devices.
Some models of Android phones are self-encrypting. But all modern iPhones (from the iPhone 4s model and up) are self-encrypting by default, similar to many SSD models. As is the case with all encrypted storage media, access to the data is verboten without the unique encryption credentials. The encryption key can be lost if the controller fails, or when an encrypted smartphone is factory reset. Factory resetting creates a new encryption key and overwrites the old one. But although there are situations where data recovery from iPhones just can’t be done, our mobile experts still have methods to salvage data from iPhones in plenty of other circumstances.
Why Choose Gillware for Your Mobile Phone Data Recovery Needs?
Many of our mobile phone cases come from clients in law enforcement. We hold ourselves to high standards of data security in all data recovery situations. Gillware is a secure, SOC 2 Type II audited and HIPAA compliant data recovery lab. If you work in law enforcement and need data recovered from a smartphone, please contact the mobile forensics experts in our Gillware Digital Forensics department.
We offer mobile phone data recovery services to more than just clients in law enforcement. We’ve recovered data from phones that have been dropped, run over, burned, and submerged in liquid by ordinary people as well. Our mobile phone experts are highly trained and highly skilled. Our in-house data recovery tools and techniques are cutting-edge. We d work to make our mobile phone data recovery services as financially risk-free as we can. We can even cover the cost of inbound shipping.
Best-in-class engineering and software development staff
Gillware employs a full time staff of electrical engineers, mechanical engineers, computer scientists and software developers to handle the most complex data recovery situations and data solutions
Strategic partnerships with leading technology companies
Gillware is proud to be a recommended provider for Dell, Western Digital and other major hardware and software vendors. These partnerships allow us to gain unique insight into recovering from these devices.
RAID Array / NAS / SAN data recovery
Using advanced engineering techniques, we can recover data from large capacity, enterprise grade storage devices such as RAID arrays, network attached storage (NAS) devices and storage area network (SAN) devices.
Virtual machine data recovery
Thanks to special engineering and programming efforts, Gillware is able to recover data from virtualized environments with a high degree of success.
SOC 2 Type II audited
Gillware has been security audited to ensure data safety, meaning all our facilities, networks, policies and practices have been independently reviewed and determined as completely secure.
Facility and staff
Gillware’s facilities meet the SOC 2 Type II audit requirements for security to prevent entry by unauthorized personnel. All staff are pre-screened, background checked and fully instructed in the security protocol of the company.
We are a GSA contract holder.
We meet the criteria to be approved for use by government agencies
GSA Contract No.: GS-35F-0547W
Our entire data recovery process can be handled to meet HIPAA requirements for encryption, transfer and protection of e-PHI.
No obligation, no up-front fees, free inbound shipping and no-cost evaluations.
Gillware’s data recovery process is 100% financially risk free. We only charge if the data you want is successfully recovered.
Our pricing is 40-50% less than our competition.
By using cutting edge engineering techniques, we are able to control costs and keep data recovery prices low.
Instant online estimates.
By providing us with some basic information about your case, we can give you an idea of how much it will cost before you proceed with the recovery.
We only charge for successful data recovery efforts.
We work with you to define clear data recovery goals for our technicians, and only charge you upon successfully meeting these goals and recovering the data that is most important to you.
Gillware is trusted, reviewed and certified
Gillware has the seal of approval from a number of different independent review organizations, including SOC 2 Type II audit status, so our customers can be sure they’re getting the best data recovery service possible.
Gillware is a proud member of IDEMA and the Apple Consultants Network.