A recovery lab reviewing recovery software is either a conflict of interest or the most honest review you’ll read — we see what these tools leave behind. Here’s the shortlist for macOS, the one Apple-specific fact that changes everything, and the cases where no download helps.
macOS trims deleted blocks within moments — the space isn’t ‘marked free’, it’s erased. Scanners shine on external drives, cards and sticks; on the Mac’s own SSD, the bins and backups are the recovery plan.
Apple builds three safety nets, and together they quietly resolve most ‘deleted on my Mac’ emergencies without a scan. The Trash, obviously — but also its thirty-day auto-empty setting, worth checking before assuming the worst. iCloud Drive’s Recently Deleted (in Finder’s iCloud section and at iCloud.com), which holds anything from synced folders — Desktop and Documents included on many setups — for thirty days. And Time Machine: if any backup drive has ever been configured, enter Time Machine inside the folder where the file lived and step backwards. Five minutes across all three beats five hours of scanning — and given the TRIM fact above, for the internal drive they aren’t just the easy answer, they’re usually the only one.
PhotoRec + TestDisk (free). The pair we’d hand a technically comfortable friend. PhotoRec carves photos, video and documents from external drives, SD cards and USB sticks regardless of what happened to the folder structure; TestDisk rebuilds lost partitions. Terminal-style interface, zero limits, zero upsell. Disk Drill (freemium). The best-behaved of the friendly Mac apps: scans fully and previews every file free, charging only to save — so you learn whether recovery is even possible before spending. Native APFS understanding, sane interface. EaseUS Data Recovery Wizard for Mac (paid). Competent and polished; know that the ‘free’ edition caps saved data to a token amount, so treat it as a trial. Stellar Data Recovery for Mac (paid). Similar territory, with long APFS/HFS+ pedigree. With any of them, the rules don’t change: recover to a different drive, never install the tool on the drive being rescued, and judge results by opening files, not by counting them.
A MacBook that won’t power on, an external drive that’s greyed out in Disk Utility or clicking softly, a Mac showing the flashing question-mark folder, a T2 or Apple-silicon machine with a dead logic board holding encrypted storage — these are hardware and firmware problems wearing software costumes. Scanning changes nothing except the wear on whatever is failing. The professional route images the storage first — board-level where the Mac’s architecture demands it, with your FileVault key where encryption applies — and recovers from the copy: the substance of our Mac and MacBook recovery service, and the follow-on from our guide to what Apple itself will and won’t do.
Beyond the Trash and Time Machine sits a quieter mechanism: macOS takes local APFS snapshots — point-in-time freezes of the whole volume — before system updates and, when Time Machine is configured, hourly on the Mac itself even away from the backup drive. If a file existed when a snapshot was taken, it’s retrievable: enter Time Machine from the folder in question and the timeline includes these local states, or list them directly with tmutil listlocalsnapshots / in Terminal. Snapshots expire on a rolling basis and yield to disk pressure, so this door closes within days — but for the ‘deleted it this morning on my MacBook’ emergency, it’s frequently the door that opens when TRIM has closed every other.
PhotoRec, with TestDisk beside it for lost partitions — free, unrestricted, and as capable on macOS as anything paid, if you can live with a terminal interface. Among the friendly-faced options, Disk Drill’s free tier is the most useful on a Mac because it previews everything it finds before asking for money — which makes it an honest scouting tool even if you never buy it.
Usually not, and it’s better to hear that before you spend an evening on it. Every modern Mac boots from an internal SSD, and macOS issues TRIM — deleted blocks are actually erased within moments, not just marked free. Check the Trash, iCloud Drive’s Recently Deleted, and Time Machine first; those bins are where Mac deletions genuinely come back from.
On a failing drive, no software is safe — deep scans are hours of sustained reading applied to hardware already struggling, and external drives that click, disconnect randomly or hang Finder need imaging on a bench, not scanning at home. Software is for healthy media with logical problems: deletions, corruption, formats. The distinction is the whole game.
From inside the folder where the file lived: open it in Finder, then launch Time Machine (menu bar clock icon → Browse, or Launchpad). The window stacks that folder’s history backwards in time — page with the arrows or the timeline on the right until the file reappears, select it, press Restore. It returns to its original location with its original metadata. If the backup drive isn’t connected, the timeline still shows local snapshots — often enough for recent losses.
An empty scan on a Mac often means TRIM, encryption or hardware — all questions our free diagnostic answers honestly before you spend anything.