Cloud sync deletes files everywhere

What this means

Sync keeps the same files on every device. That is useful until one device deletes a folder, an app corrupts documents, or ransomware changes everything. Sync then carries the damage everywhere.

This is why sync and backup are different. A backup keeps an older copy you can restore. A synced folder tries to make every current copy match.

Recovery windows are short. Major providers usually keep deleted personal files for around 30 days, but permanently deleted items and some shared files may be gone sooner.

Warning signs

• A folder disappears from several devices at once.
• Hundreds of files show the same recent modification time.
• The sync app reports a large deletion, rename, or conflict.
• Files have unfamiliar names, extensions, or unreadable contents.
• A shared folder changes after another person edits or removes it.

Recover now

First 15 minutes

1. Pause sync on every connected computer. Disconnect a device from Wi-Fi if you cannot find the pause control. Do not sign out or unlink it yet.
2. Preserve any good local copy. Copy surviving files to an external drive or a folder outside the synced location before opening or editing them.
3. Use the provider’s website to inspect activity and trash. The web view is the clearest record of what the cloud currently holds.
4. Work out the last good time. Note the first bad deletion, rename, or modification before restoring anything.
5. If files look encrypted or renamed, isolate the responsible computer. Do not resume sync until it has been checked and cleaned.

Recover from your cloud provider

Today

1. Restore a small sample first. Open documents, photos, and videos to confirm that the chosen version is good.
2. Restore the remaining files through the provider. Avoid copying a half-restored folder back into active sync.
3. Identify the device or person that caused the change from cloud activity, local timestamps, and malware alerts.
4. Clean or repair that device before reconnecting it. Change the cloud-account password and revoke sessions if someone else made the changes.
5. Resume sync on one clean device. Wait for it to finish and verify the file count before reconnecting the others.

Verify recovery

• Restored files open and contain the expected content.
• The provider’s activity no longer shows unexplained changes.
• One clean device completes sync without deleting or renaming files again.
• A separate copy exists outside the synced folder and cloud account.
• Other devices reconnect one at a time without restarting the incident.

Prepare now

Keep a real backup

• Important synced folders also have an automatic, versioned backup on another service or external drive.
• The backup is not stored inside the synced folder it protects.
• One restored document and one restored photo have been opened as a test.
• The cloud account has a unique password, strong two-factor authentication, and current recovery details.

Make mass changes visible

• Sync notifications and emails about large deletions are enabled.
• You know where the provider keeps deleted items and how long it keeps them.
• Other people receive edit access only to folders they need.
• At least one household device does not automatically sync every important folder.

Common mistakes

• Assuming sync created an independent copy. It copied the deletion too. Version history or a separate backup is what makes recovery possible.
• Letting every device keep syncing. A good offline copy may be overwritten before you notice it.
• Emptying cloud trash to make space. This can remove the fastest recovery path permanently.
• Restoring everything before finding the cause. The same damaged device may delete the restored files again.
• Overwriting the current folder with an old one. Preserve both versions until you know which recent files would be lost.

Sources

• Apple: Recover deleted files on iCloud.com
• Google: Recover a deleted file in Google Drive
• Microsoft: Restore deleted files or folders in OneDrive
• Microsoft: Restore your entire OneDrive