It depends on who’s looking.
Emptying the trash is a good approach to making sure messages you’ve deleted stay that way.
But.
Naturally, there is an exception you need to be aware of.
Become a Patron of Ask Leo! and go ad-free!
For the average email user, email in a trash folder or recycle bin is quickly recoverable. Once those folders are emptied the email is gone for good. However, the provider could be required to turn over email stored in their backups to law enforcement if there is sufficient cause. How long those backups are kept, or even what they contain, is unknown and probably varies from provider to provider.
Trashing your email: gone for good
If you click Empty Trash or Empty Recycle Bin, you won’t be able to recover any messages that used to be in there. Gone is gone.
The good news here is, the same is true for a hacker. Not only would they not be able to recover the former contents of your trash, but they wouldn’t have any indication there was anything there to begin with.
Many desktop-based email programs offer the option of automatically emptying the trash when you close the program. While this is mostly an effort to save disk space, it also makes recovery of those messages harder.
Web-based email services like Yahoo!, Gmail, Outlook.com, and others typically leave messages in your trash or recycle bin for only so long — like 30 days — before deleting them permanently. I’m not aware of any automated immediate “empty the trash on exit” functions for web email, though, so you’ll need to do that manually if it’s what you want.
Is it really gone for good?
Remember that email providers — in your case, Yahoo! and Gmail — back up their servers.
While you and I wouldn’t be able to access the email that used to be in our trash, it’s possible someone at the email provider could. For example, they might be able to access it from a backup taken before you deleted it, or other resources they maintain that we simply don’t know about.
Generally, this isn’t a huge risk when we consider hacking. It would take a rogue employee, or someone actually hacking into the data center and then knowing where to look, to find those backups. I consider this malicious scenario extremely unlikely.
But there’s another scenario people often don’t think about.
The long arm of the law
Let’s say an email may be of interest to law enforcement or the legal system. In fact, let’s say it’s an email you deleted and then emptied your trash, so even you wouldn’t be able to recover it.
Email providers are often compelled by court orders to retrieve data.
We don’t know how often — they don’t publicize the requests — and we don’t know if those requests include digging into backups. We don’t even know how long email providers keeps backups.
But the point is, in theory, an email provider could be compelled to recover messages you had removed from your trash.
To be clear, it’s not something they do lightly. If you asked them to recover one lost message, they’re more likely to tell you “tough luck” and that the data is gone forever.
But if what you’re concerned about has legal, political, or other ramifications, it is conceivable they could recover a deleted email message.
Subscribe to Confident Computing! Tech problem solving & safety tips & a weekly confidence boost in your inbox every week.
I'll see you there!
Slow Computer?
Speed up with my special report: 10 Reasons Your Computer is Slow, now updated for Windows 10.
NOW: name your own price! You decide how much to pay -- and yes, that means you can get this report completely free if you so choose. Get your copy now!
Podcast audio
Video Narration
I don’t like people frantically deleting everything they even think they don’t need anymore, because you never know when you want to look at it one more time. I don’t say you can’t delete email, just that since that deletion is permanent for all intents and purposes, you should be careful with it. Especially Gmail these days has ample space, so there’s really no need to delete anything in my opinion. I’m not familiar with Yahoo, but I imagine they too will give you space for quite a few messages.
So just be careful, and use labels or folders to stow away messages you don’t want cluttering your inbox, rather than just destroying everything. Unless of course you have something to hide, but then maybe you should just use a longer password, or get your own domain and mail server that you control (sort of: if you rent it from some hosting company, they will still be backing it up).
AND if you did have your own Domain and Mail Server, would you NOT follow “Good Practice” and back it up?
———————-
I suggest that one would expect ISPs to retain Back-ups including “deleted” files etc, for the minimum required in their “home” legal regime.
For example, in Scotland, physical Receipts for Paid Bills should be retained for at least 5 years, to provide proof of that payment. For some items it is 6 years.
In England & Wales, it is 6 years.
————————–
Technically, does “deletion” on such servers follow the same or similar pattern to PC HDDs, where a “$” sign is added to the file name, to indicate it may be over-written when disk space is required, rather than “eradication” of one sort or another?
23-Apr-2013
May seem a silly question but where can one get full but easy to understand basic instructions on how to back-up. Lacking this knowledge is possibly the reason why many people, as you have remarked elswhere on your website, do not back-up?
10-May-2013
@ Noggin,
Ask and you shall receive. Here is a link to Leo’s step by step backup articles.
How to Backup
Hi leo
What about the person you sent the original email to? They probably still have a copy ( even if you can’t access it)
Yes. Leo mentioned that in an article he linked to in the Related Posts
Are Deleted Emails Really Deleted?
Of course.
“we don’t know if those requests include digging into backups.”
We may not know for sure, but I’m certain they look into backups. Otherwise, they’d be missing a ship load of evidence.
“We don’t even know how long email providers keeps backups.” I don’t know about email providers but when I worked for Texas Instruments, they kept backups for at least 7 years (the statute of limitations for tax audits). I wouldn’t be surprised if they held stuff for a few years. In this case assuming the worst is possible is the safest.
Hi Leo,
I use Outlook for my e-mail. Just to illustrate that “deleted” doesn’t mean gone for good, there is an option in Outlook to recover deleted e-mail messages, even after emptying the Trash folder. I’ve done it a few times just to see what happens. It was a surprise to see just how many messages came up in the list, going well past 30 days. Again, proof that the Internet doesn’t forget.
Question: If you use a desktop email program like Mozilla’s Thunderbird and you set the account settings to NOT leave messages on your ISP’s server (Comcast, for example), does that mean Comcast no longer has your messages and they exist only on your own desktop computer?
Thanks for any insights.
The messages are removed from your folders on Comcasts severs, but they may still exist in their backups, for example.
“Gone is definitely NOT gone” after deleting mail from Thunderbird’s inbox.
Check it yourself. Just open the INBOX file with your favorite editor.
The File => Compress Folders (or right-click on ) should do the trick.
That is why I’ve also moved these files to encrypted partition.
if my emails are indeed gone when i empty the trash, and the
law wants to go looking through them and my provider grants
it to them, i believe the courts would call that a fishing expedition.
it would not be admissible in court. so what would be the point to ask?
unless the law wanted to find somewhere to look for evidence. but then,
again, it would be fishing.
I’m not a lawyer, so this is just my opinion, but I would say that’s bad legal advice. If the judge believes there is probable cause, it would be legal in most cases.
It actually gets way more complicated and ambiguous, since you (and I to some degree) are assuming US or similar law. There are plenty of countries or jurisdictions where “probable cause” isn’t a thing. “Because I said so” is sometimes enough.
I am not a lawyer, and what you’re postulating is a legal question — however it doesn’t have to be fishing. “We have reason to believe that a message containing ‘X’…” might well be enough for a targeted retrieval. And for that matter, fishing expeditions aren’t necessarily always illegal, just time consuming and costly.
Excellent article, Leo, for which many thanks.
I’ve been using Microsoft Outlook since it became available back in the 90s. Subsequent versions have improved tremendously and search capability is such that I rarely delete anything, especially now that space is no longer a problem. I’ve been greatly relieved and delighted over the years when I’ve searched for and found an e-mail received decades ago. The good thing about Outlook is that it automatically empties the deleted items folder whenever I exit the program.