Home / Case Studies / An M1 Mac We Had to Turn Away
Macs and Apple Kit · from the case log

An M1 Mac We Had to Turn Away

An artist at a small games studio in Leamington Spa cleared out an old code repository on his M1 MacBook, watched the folder go, and then watched most of his desktop go with it. What he wanted back were layered Photoshop files for a character set, a web project folder and a run of reference photographs. He rang the same afternoon, which was the right instinct, and the answer he got was not the one he was hoping for. It was, however, the answer that saved him money.

MacSSD / NVMeDeleted / Formatted
// what came in, at a glance
MediaAn Apple Silicon MacBook on which deleting a repository folder removed most of the desktop with it. The owner wanted layered artwork files above everything else, together with a web project folder and photographs.
What was reportedApple M1 MacBook, a repository deleted, most of the desktop contents gone with it, a handful of items still visible, layered artwork the priority, plus a web folder and photographs, recovery asked about the same day.
Fault classDeletion, and on any other machine a routine one. Removing a folder takes away the filesystem's reference to it and leaves the contents sitting in place until something else claims the space. The obstacle here is not the fault but the hardware: on this generation the flash is soldered to the logic board and tied to the machine's own security processor.
On the benchNo bench work was carried out. The model was identified from the serial, the storage confirmed as soldered rather than a removable module, and the enquiry closed with a written explanation and a list of the free routes worth trying first.
// reading the fault

Reading the fault

The deletion itself was the easy part of this enquiry. A folder removed from a Mac does not vanish from the storage. The catalogue entry that pointed at it is marked reusable and the blocks it occupied stay untouched until the machine has reason to write over them. On a disk, and on a great many SSDs that can be taken out and read, that is a job with a good chance attached to it.

What decided this was the shape of the hardware, not the shape of the mistake. On Apple Silicon machines the flash is a set of chips soldered directly to the logic board, and it is not addressed as a drive at all. There is no module to unscrew, no connector to attach to a write blocker and nothing that can be removed and read on another machine. The lab does not take storage soldered to a mainboard, so this could not be booked in.

Even setting the physical problem aside, the encryption is not a formality. The contents of that flash are encrypted with keys held in the machine's own security processor, and the chips read on their own would give back noise. That is a deliberate design and it works. It also means the usual chip-level answer to a dead controller has nothing to bite on here.

There was still something useful to tell him, and it cost nothing. Modern macOS keeps local snapshots on the internal volume for a day or so, Time Machine keeps them for much longer if a disk has ever been attached, and creative applications keep autosave copies in their own folders. None of those needed a laboratory. What they did need was for him to stop using the machine that afternoon, which he did.

// bench work

Bench work

The only work carried out was identification. The serial number confirmed an M1 model, which settles the question of whether the storage is a module or a set of soldered chips, and it is the latter on every machine in that family. That single fact closes the enquiry, and there was no reason to have the laptop posted anywhere to establish it.

He was talked through the free options on the phone and then sent the same list in writing: check for a local snapshot from the day of the deletion, check whether any external disk had ever been used as a backup, look inside the application support folders for autosave versions of the artwork, and check the browser sync and hosting account for the web project. He stopped using the machine while he worked through them.

// what went back

What went back

Two of the four things he wanted came back without a laboratory being involved. A local snapshot from that morning held the web folder intact, and the artwork application had kept its own recovery copies of three of the five character files. The photographs and the remaining two artwork files were not recoverable, and he was told that plainly rather than left with a quotation and a hope.

Nothing was charged. This job sat outside what the lab is able to accept, and an enquiry that has to be declined is closed on the day rather than kept warm. For comparison, storage that can actually be removed and read is £300 + VAT for a single drive or SSD, and that price would have applied to almost any Mac made before this generation.

Deleting something on a recent Mac

Stop using the machine, and do it immediately rather than after one more attempt to find the folder. Every minute the operating system runs it writes indexes, caches and logs, and on a machine with soldered flash there is no laboratory route waiting behind that. Then work through the free options in order: local snapshots first, since macOS keeps them on the internal volume for around twenty-four hours and they are the reason most of these enquiries end well; then any Time Machine disk; then autosave and version histories inside the applications themselves, which are far more thorough than most people realise; then any cloud or hosting account the work was ever synchronised to. If the storage is a removable module, which it is on most machines older than this one, the lab can help. If it is soldered, honesty on day one is the most valuable thing anyone can give you.

What this job cost, and on what terms. Nothing was charged: the job fell outside what this bench takes in. What a job like this costs. Nothing was invoiced here, because the work never began: what turned up fell outside what the lab can accept, and finding that out took one phone call and cost the owner nothing. Where a job does go ahead, no fix, no fee is the default and four sorts of work are excluded from it: DVR jobs, forensic jobs, chip-level work, and electronic or mechanical failure. Those four want half the quoted figure in advance, with the balance due on a successful return. Logical work, counting firmware and service-area repair, is billed only when the files come home.

If yours is doing the same thing. This mac disk was read at Oxford Data Recovery on the Oxford Science Park, about fifty-five miles down the M40. Post it tracked and insured, send it by a courier you book yourself, or bring it to the Oxford reception during Mon–Fri 9:00am–5:30pm — there is no collection service and no counter in Coventry. The free look at it takes two working days from booking in and produces one written figure that then holds.

Freephone 0800 689 0668 to talk it through first. The shipping form and what goes in the parcel are on the contact page, and every band is published in full — including which work sits outside no fix, no fee.

Book a free examination

These are real enquiries, from households and from businesses in Coventry and out across Warwickshire — Nuneaton and Bedworth, Rugby, Leamington Spa, Warwick, Kenilworth, Solihull, Stratford-upon-Avon, Atherstone and Southam. Names are gone: the customer, the company, the job title, anything at all that would point back at a person. What stays is the reasoning — what turned up, where the fault genuinely sat, which approach it demanded, and which machine on the bench did the work. One of the thirty-six was refused, and it earns a place here as squarely as any of the rest.

// related files

Two further files from this part of the log

Back to the full log →

Send yours to the same bench

Not sure whether your Mac's storage can be removed? Ring 0800 689 0668 with the serial number before you post anything. Establishing it costs nothing and takes a minute.