Data Recovery Case File · Mac & Apple Ecosystem · It May Have Moved

Where a Desktop Goes When Sync Is Switched

Her enquiry describes a disappearance with no event attached. Returning from three months working abroad to find a year of university work gone: "I had a folder on my desktop that contained a lot of really important work that I will need when I start my job in September. I have no idea where it has gone. I've checked the trash and searched my cloud account with no luck — it's as though it never existed." That last phrase is the clue rather than the despair. Files that vanish leaving no trace, no deletion and no trash entry have usually been relocated, and there is one setting that does exactly this to a desktop.

The decode: the setting that moves desktops, and the other two places to look

The mechanism that explains this best: desktop-and-documents synchronisation. When it is switched on, it does not copy the desktop to the cloud — it moves it, relocating the actual contents into the cloud storage folder and presenting them through the desktop as before. When it is switched off, the reverse happens: the files remain in the cloud folder and the local desktop is left empty. Nothing is deleted at any point, which is exactly why there is no trash entry and no trace — but the desktop that appears is a new, empty one, and everything looks as though it never existed.

Why three months away is the relevant detail: that setting gets changed by system updates, by a prompt accepted during setup, by a storage limit being reached, or by somebody else using the machine. A laptop left for a quarter is a laptop that has updated itself, possibly several times, and quite likely presented a prompt to whoever opened it.

Why searching the cloud found nothing, and this matters: she searched from the machine. If the sync relationship has been broken, the local application may no longer show the contents at all — while the files sit perfectly intact on the service's servers. The cloud must be checked through its web interface, signed in from a browser, looking specifically for a folder named after the desktop. That is a different view of a different thing, and it is the single most likely place her work is sitting right now.

The second place to check: other user accounts on the machine. A desktop belongs to an account, so a machine signed into a second account — created during setup, by an update, or by somebody else — shows an empty desktop while the original account's files remain untouched under its own profile. The login screen will show whether more than one account exists.

The third: the previous profile directory. In some upgrade situations a new user profile is created and the old one retained alongside it, so the files exist under a slightly different account name in the users folder.

Why to check all three before commissioning anything: each is free, takes minutes, and returns complete files with names and folders. A recovery cannot better that, and in this pattern of loss the odds strongly favour relocation.

What to do meanwhile: minimise use of the machine until the question is settled, in case it does turn out to be a deletion.

On the bench

Relocation routes were eliminated before any recovery work, since a loss leaving no deletion and no trash entry most often indicates files that moved rather than files destroyed. The desktop synchronisation state was established and the cloud checked through its web interface rather than the desktop application — the local client showing nothing where a sync relationship has been broken while the contents sit intact on the service. All user accounts and profile directories were enumerated on the machine. Imaging write-blocked was reserved for the case where genuine deletion remained possible.

The outcome

The relocation routes checked first, the cloud examined through its web interface and all profiles enumerated. Free assessment, and no charge where no recovery is required. The decode, for anyone whose desktop emptied itself: files that leave no deletion and no trash entry have usually moved. Desktop synchronisation, when switched on, relocates your desktop into the cloud folder — and when switched off, leaves the files there and gives you a fresh empty desktop. Nothing is deleted, which is why there is no trace. Check the cloud through a browser rather than the app, and check whether the machine has more than one user account.

Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.