Technology in terms you understand. Sign up for the Confident Computing newsletter for weekly solutions to make your life easier. Click here and get The Ask Leo! Guide to Staying Safe on the Internet — FREE Edition as my thank you for subscribing!

Can I Rely on My Cloud Service’s Backups?

Their backup may not be your backup.

The Cloud
You can rely on online services for many things, but it's unwise to rely on them too much.
Question: I keep all my data in a cloud which is backed up automatically by the provider. Is that enough?

Almost certainly not.

If your data is kept only with that one online provider — be it email, online photo albums, online music collections, generic “cloud” storage, or more — there’s a good chance you really have no backup at all.

The key is this: the backups online services make aren’t for your protection; they’re for the provider’s.

Become a Patron of Ask Leo! and go ad-free!


Cloud service backups

Cloud service providers such as email, cloud storage, and web hosts keep backups, but those backups are generally not for their customers’ use. The only real backup you have access to are the backups you create yourself.

All cloud services have backups

It’s a very poor service provider that takes no backups at all. While it happens, it’s usually discovered immediately prior to that service going out of business. It’s probably a common cause of that service going out of business.

It’s safe to assume major cloud service providers all have backups. They have hundreds, if not thousands, of servers, and store terabytes of data that are almost certainly backed up on a regular schedule. Their equipment breaks down just like ours, and it’s extremely important they not suffer data loss when it does.

For an online provider to lose data because of a problem under their control is inexcusable. Hence, they back up, likely in many ways.

Those backups are for their needs

Here’s the catch, though: those backups are for their purposes, not yours.

Their backups are to protect them.

If their servers die, they can use their backups. If their software fails, they can use their backups. If their employees make a mistake, they can use their backups.

If you make a mistake and delete a file, get malware, or suffer hardware failure, the service provider’s backups will not help.

They didn’t make those backups for you.

Their backups versus your backups

The backups taken behind the scenes by cloud services themselves may not help you.

However, cloud services are still great places for you to place your backups.

The difference is that when you use the cloud as a backup destination you are in control. While generally not appropriate for full image backups, cloud services can be perfect for additional  off-site copies of your important files. You can even do it automatically using services like Dropbox and OneDrive .

Placing your only copy of a file in cloud storage is not a backup. That storage is still only one place, and if that one place goes away for any reason, you cannot rely on someone else’s backups to recover it.

Backups you create: good. Backups you assume: bad.

Two exceptions

There are two cases where your service provider’s backups might serve more than the service provider itself.

First, they could choose to use their backups as part of a customer-facing restore option.

I’m not aware of any that do. 1

Second, if law enforcement comes along with a warrant or court order, it may compel the service provider to hand over their backups. This varies tremendously based on the provider, their location, and the jurisdiction of the requesting court or agency.

I suspect this happens with some regularity.

How to tell if their backups are useful to you

Test it.

I mean that literally: “permanently” delete a file, an email message, a photo, or a song, and see if you can use only the cloud service’s resources to recover it.

Unless there’s an online recycle bin or history feature, I’ll bet you can’t. Even though you know it’s backed up somewhere, somehow, by the service provider.

Never assume

“If it’s in only one place, it’s not backed up.”

Your online service counts as one and only one place.

Never, ever, assume anything else.

Even if they did provide some kind of backup-and-restore feature, what happens if the provider suddenly shuts down? It’s happened, and if it does, both your online data and any online recovery service they offer would both be gone in an instant.

The only safe approach is to take control of your own backups.

  • If your email is all online at one provider, use a desktop email program to back it up.
  • If your photos are all online at a photo storage service, save copies before you upload.
  • If your music is all stored online, download copies.
  • If your data is only stored in any kind of cloud service, make certain that it is also downloaded to computers you control, and back up those computers regularly yourself.
  • If you maintain a website or other online presence, back it up yourself besides whatever your web host may or may not provide.

The only backups you truly have are those you control yourself.

Do this

Subscribe to Confident Computing! Less frustration and more confidence, solutions, answers, and tips in your inbox every week.

I'll see you there!

Podcast audio


Footnotes & References

1: Web-hosting companies often offer some form of customer-facing backups. Those are often limited and quite separate from the hosting companies’ own backup strategies. Regardless, if the host goes away suddenly, any backups stored there go away as well.

17 comments on “Can I Rely on My Cloud Service’s Backups?”

  1. I wouldn’t rely on only one backup method, even one system image isn’t enough.
    As Leo says:
    A great overall strategy for backing up is what many refer to as the “3, 2, 1” approach.
    3 copies [eg. Original+ system image + cloud]
    2 different formats [eg hard drive + cloud]
    1 copy kept off-site [eg cloud, NAS, physically carry a backup drive to another location]

    And that’s the bare minimum

  2. Is there a difference between MS One Drive and Carbonite? I have both but we had a problem with Carbonite when we upgraded our Quick Books program – they were unable to back up.

    • They both store your data in the cloud, but that’s pretty much where the comparison ends. OneDrive synchronizes everything you put in the OneDrive folder and synchronizes that with every computer and device you have signed into that Microsoft account on which you have OneDrive installed. It’s not clear exactly what Carbonite backs up but it uploads all of the folders they determine to be your personal folders, such as Documents, Music, Downloads, Pictures, Video etc.

      • ‘OneDrive synchronizes…..’ – That’s an important point. Very important. I know somebody who decided to delete data from his computer in order to free up space. He thought he could do this as his data was backed up to both the cloud and an external hard drive. Both of those backups were, however, syncs so when he deleted the data from his computer, it was deleted from the cloud and external hard drive too. The cloud service had a 30-day window in which deleted files could be restored but, sadly, he didn’t notice in time to be able to do that.

        Bottom line: it’s important to understand how your backup system works.

        • Good point. It’s important to realize that deleting a file on OneDrive, DropBox or other synchronization service deletes it from the cloud server and all synchronized devices.

  3. Do you know of any way to backup your appointments and reminders in Google Calendar? A few months ago Google was apparently making some changes to the system, and all my reminders disappeared. Only for a couple hours, but I would feel much better if I knew I could recover that information if necessary.

  4. I totally agree Leo. Many people mistakenly think that sending documents etc to the Cloud is all they need to do. You can’t beat a local back up to a couple of locations (Portable HDD, thumb drive or another computer).

    The Cloud is part of the solution which, for many, has the additional benefit of being accessed and edited “on the run” by a PC, Laptop, Tablet or Phone.

  5. FWIW, when I do a search in Gmail, messages that I “deleted forever” up to six years ago are suddenly back from the dead in their entirety, if they contain the search string. This may be helpful–and scary.

  6. Remember that any files you copy to most cloud providers are either stored by that provider on their servers un-encrypted or if encrypted by the provider before storage the provider has the key and can decrypt them. That is unless you either send files you encrypt yourself before sending or use a provider that offers end-to-end encryption. Remember HTTPS only secures files during transit to the recipient. End-to-end encryption means the files are encrypted (and decrypted) on your device with a key (password) known only to you, transmitted to the provider encrypted and stored on their servers encrypted. The provider does not know the key and so cannot decrypt the files (nor can anyone that hacks the provider). I use Megasync which uses both end-to-end encryption and versioning.


Leave a reply:

Before commenting please:

  • Read the article.
  • Comment on the article.
  • No personal information.
  • No spam.

Comments violating those rules will be removed. Comments that don't add value will be removed, including off-topic or content-free comments, or comments that look even a little bit like spam. All comments containing links and certain keywords will be moderated before publication.

I want comments to be valuable for everyone, including those who come later and take the time to read.