Data Recovery Case File · Mac & Apple Systems · Both Answers Were Right Once
Whether to Remove the Drive Depends Entirely on Which Generation the Machine Is
His enquiry reports two pieces of advice that cannot both be followed. Told by one party to have the drive removed and sent in, and by another that "it would be better to hand in the whole device, since the drive is connected with other parts." Both statements were correct for different machines, and which applies here is settled by the model rather than by opinion — so it is worth establishing before anything is moved.
| Media | Laptop with liquid ingress — storage architecture dependent on model generation; removable module or board-integrated memory not yet established |
| Reported situation | Laptop subject to liquid damage · advice received to remove the drive and submit it alone · contrary advice received to submit the complete device · owner uncertain which to follow · attendance in person offered · content required |
| Fault class | Liquid damage with storage architecture unestablished — removable module and integrated memory requiring different handling; corrosion progressing meanwhile |
| Equipment used | Model generation established as determining the correct handling before any disassembly · complete device accepted where architecture was uncertain · board examined at component level under magnification with corrosion mapped · storage module removed and imaged independently where removable · memory read in place past the controller where integrated |
The decode: why both answers exist, and how to settle it
What machines of earlier generations allowed: removal. Storage was a separate module that unplugged and could be read on other equipment, so a damaged machine was an obstacle rather than a factor.
Why the first advice was standard for years: it is the better route when it applies. Removing an undamaged drive from a damaged machine takes the liquid problem out of the case entirely.
What changed in later machines: storage became part of the board. Memory is soldered alongside the processor with no connector, and there is nothing to remove.
Why the second advice is right for those: the board is the drive. Attempting to remove storage that is soldered achieves nothing and risks the components that matter.
Why the second party may also be right for a further reason: content on recent machines is encrypted by hardware. The key is held by a security component on the same board, so the memory alone yields nothing interpretable — and the board must be kept with it.
How the question is settled: by the model and year. The architecture is a matter of record rather than judgement, and it can be established before anything is opened.
Why bringing the whole machine is the safer default when uncertain: it preserves both options. A complete device can always have its drive removed here; a drive removed elsewhere cannot be reunited with a board that was discarded.
Why that matters particularly with liquid damage: disassembly by an uncertain party risks disturbing corroded connections. Removing a module from a corroded socket can damage both.
Why time is the more urgent factor here: corrosion continues. Residue remains conductive and draws moisture from the air, so damage progresses while the decision is being made.
What must not happen meanwhile: no attempts to power the machine, and no drying with heat. Powering a board with liquid residue creates paths for current that were never intended.
On the bench
Model generation was established as determining the correct handling before any disassembly — earlier machines providing a removable storage module which can be read independently of a damaged host, later ones soldering memory alongside the processor with content encrypted against a security component on the same board, so memory alone yields nothing interpretable. Where architecture is uncertain the complete device preserves both options. Corrosion was mapped at component level.
The outcome
Model generation established as determining handling, the complete device accepted where architecture was uncertain, and corrosion mapped before any disassembly. Free assessment, one fixed written figure including VAT; where a chip has to be removed, 50% of parts and labour is payable upfront with the balance only on success — otherwise no recovery, no fee. The decode: both people were right, about different machines. Older ones have a drive you can take out; newer ones have memory soldered to the board and encrypted against a component on it — so the model settles it.
When you are given conflicting advice about a damaged machine
Bring the whole device if you're unsure, because it preserves both options — a complete machine can always have its drive removed later, whereas a drive removed elsewhere can't be reunited with a board that was thrown away. The disagreement isn't carelessness: older machines have a storage module that unplugs, and newer ones have memory soldered beside the processor and encrypted against a security component on the same board. Don't power it or dry it with heat, and move quickly, since corrosion continues after the liquid has gone.
Bring the whole machine — call Cambridge Data Recovery on 01223 655015; model generation established as determining handling, corrosion mapped before disassembly, both routes preserved.
Request a quote online →
Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.