MacBooks tend to fail quietly. The charger gets refused, or the lid closes and the machine never wakes again, or a folder with a question mark appears halfway through a coffee on Bold Street. On any model where the storage lifts out, meaning a SATA disk in the older bodies and Apple's blade SSD across 2013 to 2017, the odds strongly favour everything on it having come through intact, spillages included.
Every apple macbook job is diagnosed free. One fixed figure follows in writing, agreed before a screwdriver comes out of the drawer.
No fix, no fee all jobs except electronic and mechanical failures, chip level work, DVR and Forensic jobs. Every band is listed on the data recovery cost page.
Matching the symptom to the fault underneath is the first job on any apple macbook, and after twenty-odd years these thirty account for very nearly everything that arrives.
Whatever went in, it runs down across the logic board, while the storage sits higher in the chassis and stays dry. Board and data part company at that point, and only one of the two is our department.
The board is finished. The data is not. It sits on a removable disk or a blade, waiting, and lifting it off there is faster and far more certain than any attempt at repairing the board.
Either the internal storage has failed or it has lost the system it was holding. Image first, theorise second. That is a house rule here rather than a preference.
It died during the install and the machine has gone round the same loop ever since. Your documents take no part in any of that. They sit still on the module while the wheel turns, which is worth knowing during the wait.
Machines of that age still hold real spinning disks, and real spinning disks lose heads. Filtered air, donor parts, a well-understood ending. How old the laptop happens to be makes no difference whatever to the result.
Gumstick blades from 2013 through 2017 fail the way flash always fails, which is abruptly and in silence. They image on native adapters here, and nobody has to strip a donor MacBook down to act as a host.
Disk Utility was given an instruction and it carried that instruction out. Carving reverses it, provided nothing has reused the blocks that were freed. So the lid stays down and the machine stays off until the module is in the post.
Supply the password or the recovery key and an encrypted volume recovers as everyday work. Go and find it before you ring rather than after, because that hunt is where most of the delay comes from.
Neither is really gone until something else claims their blocks. Take the machine out of service today, and tomorrow it will still be holding the large majority of what was on it.
The files are fine and the screen that would have shown them is not. Display failures of that era leave everything locked behind black glass. Getting it out from behind there is the whole job, and it is a short job.
Every so often an SSUBX or an SSPOLARIS loses its translation tables and leaves the bus without a word to anybody. That is service-mode ground, and it is well walked.
Machines from 2009 to 2012 wear through the internal SATA ribbon and stage a thoroughly convincing drive failure. Out of the chassis, the disk images perfectly. As surprises go, that one is cheap.
A swelling cell bows the case and presses on the board above it, and the storage comes out of the episode untouched. Stop charging the machine today, not on Saturday.
A spill's preferred way in. It shorts the lower board while the storage sitting above it stays dry. This particular film gets watched here a great many times a year.
A blade written off elsewhere gets a real second attempt, on different adapters. Now and again that alone is the whole recovery, which says a good deal about adapters and very little about anybody being clever.
Heat works on the blade and the battery at the same time. Read errors then surface weeks later, long after the sunshine that caused them.
Flash rarely stops all at once. It fails in stages, and panics and grey screens are what those stages look like from outside. Image it before the stages run out, because they run out without notice.
Erased ready for sale, with a backup nobody ever checked. Anything an erase has not physically overwritten can be carved back off the module, and that is frequently a great deal more than the owner expects.
A dozing pre-2012 machine still has its platters turning. One rucksack meeting a pavement costs it heads, and donor parts are what reopen the conversation.
A hard close cracks the board where it is thinnest, while the storage module ignores the whole event. Module out, module on a bench, matter closed.
The nine-pound knockoff with firm views on voltage finishes off a board in a single evening. Storage barely notices any of it. Out it comes, onto a bench, and away it goes.
Third-party M.2 modules in adapter sleds arrive carrying their own firmware quirks and their own habits of failure. They get imaged natively whatever the sticker on the top says.
Hold the power button down often enough and the APFS container metadata eventually gives way. A full image of the module is what it gets rebuilt from, rather than repairs run on the machine itself.
The well-documented graphics failure of that year takes the display and the ability to start up along with it, and leaves the disk entirely alone. Send the drive by itself and it images like any other.
A firmware lock stops the machine politely and completely. On pre-T2 models the storage takes no notice of it whatsoever: out, imaged, recovered.
Some T2 logic boards carry a dedicated data-recovery connector, and people ask about it quite reasonably. Using it takes a working board plus Apple tooling, which is exactly what nobody has when the board is what died. Those machines get declined here, and you hear that before you pay for any postage.
An update to macOS rewrites the partition map, and everything on the Windows side drops out of view with it. Nothing has actually been lost. The map is what wants rebuilding, and doing that from an image is straightforward, where doing it on the live disk is genuinely risky.
A machine carried every day along the front at Crosby, or back and forth on the Mersey ferry, picks up corrosion on its connectors and board edges long before anything ever gets spilled on it. Intermittent faults come first and a dead machine comes later. Most of them, once cleaned and neutralised, image properly and give up the lot.
An earlier repair put heat into the board while the storage module was still sitting alongside it. The board survived. The module did not. Whatever is left gets read out at chip level, which is worth attempting rather than assuming.
Somebody enables encryption and macOS begins working through the volume quietly in the background. On a disk with spreading bad sectors that is an enormous number of additional reads and writes, arriving at the worst possible moment, and it stops half done. Both halves are handled from an image, region by region.
What settles it is the kind of storage fitted, not the date on the receipt. Machines up to 2012 use a 2.5-inch SATA disk, and that is about as ordinary as Apple work gets. From 2013 to 2017 Apple fitted its own blade SSD, equally simple once the right adapter comes off the shelf, and that generation still accounts for a large share of the Airs and Pros being carried around Liverpool every day. Both kinds unplug, get imaged, and go back to their owners. The picture changes in 2018 with the arrival of the T2 chip, and Apple Silicon carried it further. On those the flash is soldered into the logic board and wrapped in hardware encryption, so a dead board takes the data with it, and no honest firm will tell you different. Attempts of that sort came off the service list about two years ago because so few of them came good that charging for the attempt could not be justified. If you are unsure which era yours belongs to, the model number is printed in small type on the underside.
Whatever gets spilled lands on the logic board first, and the board takes the punishment that would otherwise reach the storage. Pull the disk or blade out of such a machine, clean and treat it, and it will normally image without any argument. The jobs that end badly are lost to hope rather than to chemistry. Somebody connects the charger just to see whether it still works. It spends a fortnight buried in rice. It gets left on a radiator overnight to dry out. Powered down, unplugged, and dealt with quickly is the whole recipe, and getting those three right wins most of it before a parcel has even been addressed.
With a MacBook the job is largely logistics. Get the module out, onto native hardware, and imaged before anything else happens:
Every gumstick generation, plus the twelve-plus-sixteen pin variants, connects natively for imaging. At no stage does a cannibalised MacBook get used as a host.
The spinning disks in machines built before 2012 get classical treatment in filtered air, donor heads included.
Spill-damaged blades and connectors are cleaned, neutralised and dried until they read steadily. An intermittent read is not a good enough basis to image from.
Both file systems read natively, snapshots retrieved, and FileVault opened with whatever credentials you are able to supply.
Lost volumes, lost snapshots and individual deleted files carve back for as long as nothing has claimed their blocks. That window runs to days, not weeks.
A module written off on another bench gets a fresh attempt on different hardware here. Every so often that alone closes the case.
Everything turns on 2018. Before that year the disk or the blade unclips, travels on its own, and gets recovered here as routine work at £300 + VAT a unit. After it, T2 and Apple Silicon fuse encrypted flash to the logic board, and nobody can make a truthful promise about those. Spill survivors, frayed ribbons impersonating dead drives, blades that mislaid their own mapping: all of them finish in the same place, which is a module on a bench and files back on fresh media. A free diagnostic takes two working days from arrival, and even the fastest finished recovery runs to 2-4 working days, so nobody here is going to promise you an afternoon.
Almost every job on this bench came in by tracked, insured post. It is the calmest way to move a drive that is already struggling, and a parcel handed in anywhere on Merseyside usually reaches the bench the following working day.
Still screwed inside a laptop, tower, MacBook, iMac, server or a CCTV recorder? Take the drive out and post that on its own. We do not strip machines here, and any computer shop will do it in a few minutes. The one job nobody can take on is flash soldered straight to a logic board, as on Apple Silicon Macs and a handful of very slim laptops: if the storage will not unbolt, there is nothing to send.
↓ Print the shipping & booking-in form (PDF)
Address it to Manchester Data Recovery. It is roughly 35 miles from Liverpool along the M62 if you fancy the run, and next working day by tracked post if you do not. We ring or email the moment it is booked in, and the free diagnostic closes 2 working days after that.
Not sure what belongs in the parcel? Call 0800 689 0668 before you tape it shut, or step through the free online diagnostic first.
Diagnosis free, one figure written down, and £300 + VAT covers a single drive or SSD. Start online or ring.