my data disappeared" recovery checklist
A recovery checklist for "my data disappeared" tickets: distinguishing deleted, filtered, and permission-hidden data, checking trash and version history, and when to escalate to a backup restore. Use when a user reports missing records, files, or content, when data vanishes after an update, or when writing the data-loss macro. Not for sync delays that resolve on refresh, permission changes done on purpose, or data the user never had access to.
TL;DR
"Disappeared" usually means hidden, filtered, or moved, not deleted, so do not promise a restore before you look. Check the trash, the filters, and who else touched the record first. Real deletion is rarer than people think, and the panic makes everyone skip the easy checks, so slow the ticket down deliberately.
The query
"my data disappeared" recovery checklistUse this when
- A user says records, files, or content vanished
- Data is missing after an update or migration
- A shared item is gone for one person but not others
- You need the data-loss macro
- A manager asks for a recovery status
Not for
- Sync delays that fix themselves on refresh
- Access revoked intentionally by an admin
- Data the user never had permission to see
- Performance issues with large datasets
Steps
1. Slow down and get specifics
Ask what exactly is missing: names, dates, how many items, when they last saw it. "Everything is gone" is a feeling, not a fact. The specifics tell you whether to look at one record or the whole account.
Expected output: a concrete description of the missing items.
2. Check filters, views, and search first
Have them clear all filters, switch to the default view, and search by name. Most "disappeared" data is sitting one filter away. Also check archived or hidden states, which many apps treat separately from deleted.
Expected output: the data found under a filter, or filters ruled out.
3. Check the trash and version history
Look in the trash or recycle bin for recently deleted items, and check version history or activity logs for who changed what and when. The log usually names the person or the sync that removed it, which turns a mystery into a conversation.
Expected output: the deletion event found, or no deletion recorded.
4. Check whether someone else moved or deleted it
In shared workspaces, ask the team. A colleague reorganizing folders causes half of these tickets. The activity log is the fastest witness. If it was a teammate, the fix is a conversation, not a restore.
Expected output: the human cause identified, or ruled out.
5. Escalate to restore only with evidence
If the data is truly gone with no log trail, escalate for a backup restore with the specifics from step 1: what, when, whose account. Tell the user honestly what restores can and cannot recover, and give a timeframe instead of "we're working on it."
Expected output: a restore request with everything engineering needs, or confirmation nothing is recoverable.
Ready-to-use message
I know this is alarming, so let's check the easy things first.
In most cases like this the items are hidden, not gone.
1. Clear any filters or search terms, and check the default
view
2. Look in the trash or recycle bin
3. Search for one item by its exact name
Can you also tell me: what specifically is missing, and when
did you last see it? If it's truly deleted, I can look into
restoring it from our backups, but I need those details first.Variant phrasings
all my files disappeared help
Steps 1 through 3 in one message. Slow them down before they panic-click.
recover deleted records support
Steps 3 and 5. Trash first, then the restore path with specifics.
missing data after update
Steps 2 and 3. Updates love to reset views and filters, so check those before assuming loss.
Why it happens
Data rarely deletes itself. It gets filtered out of view, moved by a well-meaning colleague, archived by an automation, or hidden by a permission change, and each of those looks identical to deletion from the user's chair. The checklist works because it walks the likelihood ladder from most common to least, instead of jumping to the scariest outcome first.
Edge cases
- Sync conflicts: two devices editing offline can overwrite each other. Check the sync log and version history for competing writes.
- Retention policies auto-deleting: some systems purge old items on a schedule. If the missing items share an age, check the retention rules before promising a restore.
- The user deleted it themselves weeks ago and forgot: the log will show it. Be kind about it, people do not remember deleting things.
- Restore partially succeeds: tell the user exactly what came back and what did not, in writing. Vague "we restored your data" messages create second tickets.
- Data missing for one user only: that is permissions, not deletion. Check their role and team membership before touching backups.
Provenance
Resolved from the public thread: https://vectle.com/posts/pst_maf8NWIlaDuYPT5GmJQ3BA
Maintainer review
No maintainer verification is recorded for this version.
This records the version a maintainer checked. It does not assert that the version is the latest upstream release.