Data recovery
Also known as: file recovery, deleted file recovery
Data recovery is the process of getting back files that have been deleted, corrupted, or trapped on a failed drive, phone, or memory card.
Simple cases, such as an accidentally deleted file, can often be fixed with recovery software if you act quickly. Physically damaged drives may need a specialist lab with clean rooms and replacement parts, costing hundreds or thousands of dollars. While recovery is sometimes possible, it's never guaranteed, which is why backups are far cheaper and more reliable.
Data recovery, explained at three levels
At home
Data recovery is like calling a locksmith after losing your keys. Often they can get you back in, but it takes time, costs money and isn't guaranteed. When you delete a file, the computer usually just crosses it off its list while the data stays on the drive, so recovery tools can find it, unless something new has been written over it.
At work
Data recovery is the process of getting back files that were deleted, corrupted or trapped on a failed drive. Software can often recover simple deletions, while physically damaged drives need a specialist lab, sometimes costing thousands of dollars. Businesses care because recovery is slow, expensive and never guaranteed, which is why tested backups are the real plan and recovery only a last resort.
At home
Deleting a file usually removes its entry from the drive's index and marks the space as free, while the data itself stays until something new overwrites it. Recovery software scans the drive for those leftover pieces, either through traces in the file system or by recognizing file signatures, and rebuilds the files. That is why you should stop using the drive immediately after a deletion: every new file saved risks overwriting what you want back.
At work
Logical recovery handles deleted files, formatted drives and corrupted file systems using software, often by imaging the drive first and working on the copy. Physical recovery handles mechanical or electronic failure, such as failed read heads or damaged circuit boards, in a clean-room lab where technicians replace parts and read the platters. SSDs complicate both, because the controller manages data placement and may have already erased deleted blocks. Choose providers with confidentiality agreements.
At home
A hard drive that clicks, grinds or repeatedly spins up and down usually has a mechanical failure, such as damaged read heads. Every minute it runs can scratch the platters further, turning a recoverable situation into a lost one. Recovery software cannot fix hardware, and repeated scans stress the drive. In my view, turn it off immediately and contact a professional lab if the data matters, rather than trying software first.
At work
Include recovery vendors in incident and disaster plans, with confidentiality, data handling and chain-of-custody agreements, since drives often contain personal information subject to privacy law. Understand that encrypted drives require keys and that TRIM-enabled SSDs may be unrecoverable after deletion. Physical recovery can cost thousands of dollars per drive with no guarantee. Invest in tested, versioned backups so recovery services become a last resort rather than a plan.
Real-world examples
At home
Nadia accidentally formatted her camera's memory card. Free recovery software brought back most of her vacation photos because she stopped using the card right away.
At work
Carlos's Montreal MSP sent a client's failed server drive to a recovery lab. The $2,500 bill convinced the client to finally adopt cloud backups.
How it compares
| feature | Data recovery | Restore from backup |
|---|---|---|
| Cost | Often high | Low |
| Success | Not guaranteed | Reliable if tested |
| Speed | Days or weeks | Minutes to hours |
| Planning needed | None, it's reactive | Yes, in advance |
Recovery is an emergency rescue. Backups are the plan.
For analysts
When presenting backup budgets, I'd compare them with typical recovery lab costs and downtime. The comparison usually settles the decision quickly.
History & origin
As hard drives became common in the 1980s, companies such as Ontrack, founded in 1985, began offering professional recovery services. Software tools that recovered deleted files appeared early, since deleting a file usually only marked its space as free. Specialist labs developed clean-room techniques to repair failed hard drives, famously recovering data from drives damaged in disasters such as the Space Shuttle Columbia accident in 2003. Solid-state drives changed recovery, since features such as TRIM erase deleted data quickly, and encryption made recovery impossible without keys. In my view, data recovery is a last resort that teaches the value of backups the hard way.