Where Do Deleted Files Go? How to Get Them Back or Erase Them

Most of the time, “deleted” doesn’t mean “destroyed”. That’s good news when someone deletes the wrong folder, and bad news when you sell an old laptop. Here’s where deleted files actually go, how to get them back, and how to make sure they’ve really gone when you need them to.

Step one: the recycle bin

On a Windows PC, deleting a file moves it to the Recycle Bin. On a Mac it goes to the Bin (called Trash on older versions). Nothing has been erased yet. You can open the bin and restore the file to where it was.

Files you delete from Microsoft 365 go to a recycle bin too:

• OneDrive (work or school): 93 days, unless your administrator has changed it. Personal OneDrive accounts keep them for 30 days.
• SharePoint and Teams files: 93 days, across the site recycle bin and a second-stage recycle bin that a site owner can restore from.
• Outlook email: deleted email sits in Deleted Items until that folder is emptied. Even then, Exchange Online keeps it as recoverable for 14 days by default, and an administrator can raise that to 30.

Phones do something similar. On an iPhone, deleted photos and videos stay in the Recently Deleted album for 30 days before they’re removed for good.

Step two: “permanently” deleted

When you empty the bin, or press Shift+Delete on Windows, the file disappears from view. What actually happens is that the computer removes the file’s entry from the drive’s index and marks its space as free. The data itself stays on the drive until something new is written over it.

Think of a library that removes a book from its catalogue but leaves it on the shelf. Nobody can look it up, but anyone who walks the shelves can still find it, until a new book takes its place.

Why SSDs are different

Most business laptops now use a solid-state drive (SSD) rather than a traditional hard drive. SSDs tidy up freed space in the background (a process called TRIM), so deleted data is often cleared much sooner. Microsoft’s own guidance for its Windows File Recovery tool warns that recovery can fail because “the free space was overwritten, especially on a solid-state drive (SSD)”.

So on a modern laptop, don’t count on recovery software to rescue a permanently deleted file.

How to get a deleted file back

Work through these in order:

1. Check the recycle bin, on the device and in OneDrive or SharePoint if the file was stored there.
2. Check version history. If a file was overwritten rather than deleted, OneDrive and SharePoint keep earlier versions you can restore.
3. Restore from backup. This is the reliable route once a file has left the recycle bin, and the only one once the retention period has passed.
4. Recovery software, as a last resort. Stop using the device straight away, because every new file you save could overwrite what you’re trying to recover. Recovery tools have a reasonable chance on a traditional hard drive and a much lower one on an SSD.

If an important file is gone and none of these work, the lesson is about backups. Our guide to building a backup strategy covers what a small business needs, including backing up Microsoft 365, which recycle bins alone don’t do.

How to make sure a file is really gone

The flip side matters when a device leaves your control: sold, donated, returned under warranty or handed to a new member of staff. The NCSC is blunt: “Simply hitting the ‘Delete’ key isn’t enough.”

Its guidance for organisations depends on whether the device is encrypted:

• Encrypted devices (for example, Windows with BitLocker or a Mac with FileVault): a manufacturer’s factory reset deletes the encryption keys, making the data unreadable. The NCSC says this gives “a satisfactory level of assurance” for most devices.
• Unencrypted devices: overwrite the whole drive, for example with the manufacturer’s own sanitise tool or a commercial erasure tool that verifies the result, then check it.
• Devices that can’t be wiped, such as a broken drive: physically destroy the media, or use a disposal company that holds recognised certification.

That’s why encrypting every laptop from day one is worth doing. It protects you if the laptop is lost, and it makes disposal simple. Our post on disposing of old IT equipment responsibly covers the rest of the process.

What this means for your business

Two simple habits cover most of it:

• Keep files in Microsoft 365, and back it up separately, so an accidental deletion is a quick restore rather than a crisis.
• Encrypt every device and wipe it properly before it leaves the business, so old data can’t be found by whoever ends up with it.

If you’d like help with either, our backup and disaster recovery service covers managed, tested backups of devices, servers and Microsoft 365, and our cyber security service covers device encryption and secure set-up.