Mobile data has become one of the most critical sources of evidence in modern litigation. It’s also one of the most misunderstood.
In this episode of In Discovery Mode, Ryan Frye (ModeOne) and Jason Voss dive into a growing issue across legal and eDiscovery teams: the false confidence that comes from assuming a collection is complete.
Because more often than not, it isn’t.
The Big Assumption Problem
One of the most common (and dangerous) beliefs in discovery is simple:
If we collected the data, we must have everything.
In reality, that assumption breaks down quickly.
As discussed in the episode, most teams operate under the belief that:
- Data transferred correctly
- Nothing was lost during collection
- Their tools captured everything available
But mobile ecosystems don’t work that cleanly. And that’s where problems begin.
What You See Isn’t What You Get
One of the clearest examples? Email.
Many users assume that because they can access email on their phone, it must be stored there.
It’s not.
As Jason explains in the episode, phones often only contain:
- Previews
- Cached snippets
- Access points to data stored elsewhere
That means collecting a phone does not equal collecting the underlying data.
And email is just the beginning.
Where Mobile Collections Break Down
The conversation highlights several real-world gaps that consistently show up in mobile data:
- Missing or Incomplete Conversations
Messages don’t always sync perfectly across devices. A user with an iPhone, iPad, and laptop may have different versions of the same conversation depending on where the data is stored or accessed.
- Fragmented Data Across Devices
A single custodian may have:
- Multiple phones
- Secondary devices
- Cloud backups
- App-specific storage environments
Without proper scoping, collections can miss entire segments of data.
- Attachments Are the Biggest Risk
Attachments are frequently:
- Missing
- Stored externally (e.g., SharePoint links, cloud storage)
- Disconnected from the original message
In some cases, only images are captured, while key documents remain behind links requiring credentials or separate extraction processes.
This creates a major gap between what appears to be collected and what actually is.
The Landscape Keeps Changing
Even if workflows were once reliable, they may not be today.
The episode highlights how:
- Apple and iCloud changes impact what data is accessible
- Authentication and token shifts disrupt collection methods
- Messaging platforms constantly evolve their storage structures
In other words, tools are always playing catch-up.
And teams relying on outdated assumptions may not realize they’re already behind.
Why This Isn’t Just a Mobile Problem
While the discussion centers on mobile data, the implications go much further.
These same challenges apply to:
- Collaboration platforms like Teams and Slack
- Cloud-based storage systems
- Modern communication tools across organizations
This isn’t just a mobile issue—it’s a data integrity issue.
What Good Looks Like Today
The solution isn’t just better technology.
It starts with better awareness.
As Ryan emphasizes, the most important shift is asking the right questions upfront:
- Did the custodian upgrade their device?
- Are multiple devices being used?
- Is the data stored locally, or in the cloud?
- Are attachments stored separately?
These simple intake questions can dramatically improve collection outcomes.
From there, teams can make more informed decisions about tools, workflows, and defensibility.
Final Thought
The biggest risk in modern discovery isn’t bad data. It’s incomplete data—and not knowing it’s incomplete. As mobile ecosystems continue to evolve, success in discovery will depend less on assumptions and more on understanding where data actually lives.