Data Recovery Case File · Second Fixes & Trade Handoffs · Get It Back Today

Formatted to Test It, Without Being Asked

Her enquiry describes something that should not have happened and frequently does. She took her phone into a local repair shop because a new memory card was causing it to glitch: "they took it to the back and came back saying they had formatted the SD card but hadn't been able to fix or figure out the problem." Formatting was a legitimate diagnostic step — ruling the card out as a cause — and it was done destructively, on somebody else's data, without a conversation. The good news is that a format of that kind does not erase anything, so this is very probably recoverable if she acts quickly.

The decode: what the format did, and the two urgent things

What a quick format actually does: writes a fresh empty index and marks the whole data area as available for reuse. It does not visit the data or overwrite it — that would take far longer and serve no purpose, since the objective is to make the card usable rather than to destroy anything. So her photographs and files are physically present on that card, unlisted rather than removed.

The first urgent thing: the card must come out of the phone and stay out. It is back in a working handset, which means the phone is doing what phones do — indexing, writing thumbnail caches, saving application data, logging. Every one of those writes goes into the space the card now considers free, which is precisely where her material sits. The clock is running and it is the only thing that limits the result.

The second, which costs nothing: go back to the shop and ask, in writing, exactly what they did — whether it was a quick format or a full one, whether it was done in the phone or on a computer, and whether they wrote anything to the card afterwards while testing. A full format that writes across the whole capacity is a materially different situation from a quick one, and they know which they ran. Nobody should have to guess at this.

On the shop, fairly: formatting a card is a reasonable diagnostic step for a handset glitching with new media, and it is exactly what many technicians would try. The failure was not the technique but the consent — a card belonging to a customer, holding their data, should not be erased without asking, and taking a device "to the back" removes the moment where that question gets asked. It is worth raising with them plainly, and worth them hearing.

One thing worth noting about the original fault: a new card causing a phone to glitch is itself suspicious. Counterfeit and mislabelled cards are widespread, and a card reporting more capacity than it physically holds behaves erratically once use passes the real limit. That is worth establishing, because it affects whether a replacement should come from the same source.

What to expect: where the format replaced only the index, recovery frequently returns files with names and dates from index remnants; otherwise carving identifies them by their own structure and returns them organised by type and date.

On the bench

The card was removed from the handset immediately, since a card returned to a working phone is written to continuously by indexing, caching and application data — into precisely the space the format marked free. It was imaged write-blocked behind the DeepSpar USB Stabilizer 10Gb, and the extent of post-format writes measured, since that single figure determines what remains. Index remnants were reconstructed to return original names and dates where possible, with signature carving across the full extent alongside. Media was validated by rendering.

The outcome

The card taken out of use, the post-format write extent measured and the contents carved and validated. Recovery of deleted or overwritten data from memory cards and USB sticks is charged at a flat figure, payable upfront. The decode, for anyone whose card was formatted by somebody else: a quick format writes an empty index and marks the space reusable rather than erasing anything, so your material is physically still there. Take the card out of the device today, because a card back in a working phone is written to constantly. And ask the shop in writing whether it was a quick format or a full one — they know, and the answer changes what to expect.

Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.