Deleting a Message Rarely Destroys It
When a message is "deleted", the phone typically marks the database row as free space rather than erasing it. Until that space is overwritten, forensic tools can recover the message — including its timestamps, participants and often attachments. iMessage and SMS live in SQLite databases that retain deleted rows; WhatsApp keeps encrypted local backups; Signal and Telegram are harder, but device backups, linked devices and the other participant’s handset frequently preserve what one side deleted.
Where Deleted Messages Survive
Beyond the phone itself: iCloud and Google backups made before the deletion, iTunes/Finder backups on a computer, the recipient’s device, corporate archiving systems, and even smartwatch caches. A proper examination maps every place a conversation could persist — which is why "the messages are gone" is a claim worth testing, not accepting.
Time Matters More than Anything
Continued use of the phone overwrites freed database space. Heavy app use, photos and updates can destroy recoverable messages within days; a lightly-used device may retain them for months. If deleted messages may matter to your dispute: stop using the device, do not attempt recovery apps, and get it forensically imaged.
Recovery Alone Is Not Admissibility
A screenshot of a recovered message proves little. For court, the recovery must be performed on a forensic image, hash-verified, and documented so the examiner can explain in testimony exactly where each message was found and why its metadata can be relied on. That is the difference between a phone shop’s "data recovery" and a forensic examination — and courts know the difference.
What to Do Right Now
Power the device down or place it in flight mode, secure any computers it has synced with, preserve cloud account credentials through your lawyer, and engage a forensic examiner before anyone "has a look". Preservation costs little; a destroyed message thread cannot be bought back.