The 30-second answer. If Google Drive, iCloud, OneDrive, Dropbox or a WhatsApp backup has wiped your files in India, do not log in repeatedly and do not pay any “recovery agent”. Open the official Trash or Recently Deleted area inside your account within 30 days, restore from there, and screenshot every step. If files are missing past the Trash window, escalate in writing through the provider Grievance Officer notified under the IT Rules 2021. If a paid plan lapsed and the provider purged data without the warnings their own policy promises, you have a deficiency-of-service route under the Consumer Protection Act 2019 §2(11). If a stranger logged in and deleted your data, file a cybercrime complaint at cybercrime.gov.in or call 1930, since unauthorized deletion is an offence under IT Act §43 and §66 read with BNS §318. This guide walks you through the first 30 minutes, the evidence each provider expects, the consumer and cyber routes, and a ready-to-send escalation email.
Cloud storage is no longer optional. School certificates, EPF passbooks, GST invoices, family photos, the only copy of medical reports, and small-business order books often live inside one Google, Apple, Microsoft or Dropbox account. When that account quietly drops 47 GB because a payment failed, or a child pressed “Empty Trash”, the loss does not feel digital. It feels like a fire.
Six common causes:
Each cause has a different recovery path. Angry tweets, “recovery experts”, or panic factory-resets turn a recoverable loss into a permanent one. In-window recovery first, then a written grievance.
Cloud “delete” is almost never instant. Every major provider keeps a soft-delete buffer because engineers, courts, and tax authorities can demand the data back. Buffer lengths:
If loss is less than 30 days old, recovery is self-service in the provider Trash. Past 30 days you need a written grievance, and for paid plans a deficiency claim.
Set a 30-minute timer. Work in order. Do not skip ahead, do not log in from a second device, do not “Empty Trash” anywhere.
Match the message to one of these six buckets:
Use only the provider URL below. Do not Google “Google Drive support phone India”, because the top results are usually paid ads from fake “recovery experts” who will ask you to install AnyDesk or share an OTP.
Sign in only at the bare provider domain. If any URL during the recovery flow looks like drive-recovery.in or icloud-help.support, close the tab. Those are phishing pages.
After a full restore, change your password from the same trusted device and turn on two-factor authentication. The new sign-in alerts you will start receiving over the next 24 hours tell you whether the original deletion came from a stranger.
Three statutes and one rule govern cloud-storage data loss. Cite them by section when you write your grievance.
Information Technology Act 2000, §43(d) and §43(g). A person who, without permission of the owner, downloads, copies, extracts, damages, deletes, alters, or causes deletion of data stored in a computer resource is liable to pay damages by way of compensation. §43 reads with §66 makes the same act, if dishonest or fraudulent, a criminal offence punishable with up to three years imprisonment or a fine up to five lakh rupees.
Bharatiya Nyaya Sanhita 2023, §318. Cheating by personation through a computer resource is the operative offence post-2024 for impersonation-driven data loss. Unauthorized deletion of data after a phishing or account-takeover attack is charged here, alongside IT Act §66 and §66D.
Consumer Protection Act 2019, §2(11). “Deficiency” includes any fault, imperfection or inadequacy in the quality, nature or manner of performance which is required to be maintained under any law, contract or assurance, express or implied. A cloud-storage provider that promised 30-day Trash and purged your files in 11 days, or that took a renewal payment and downgraded you anyway, has caused a deficiency in service.
Digital Personal Data Protection Act 2023, §11 (Right of access to information). The Act gives a Data Principal the right to obtain a summary of personal data being processed and the activities undertaken by the Data Fiduciary. While DPDP does not directly compel restoration, this section is the legal basis for asking the provider, in writing, what was deleted, when, at whose request, and whether any retention copy still exists.
Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, Rule 3(2). Every “significant social media intermediary” and every intermediary that hosts user data must publish the name, contact, and address of a Grievance Officer, must acknowledge a grievance within 24 hours, and must dispose of it within 15 days (or 72 hours for content takedown requests, which sometimes applies to deleted-account appeals). Google, Apple, Meta, Microsoft and Dropbox each publish an India Grievance Officer page. This is your written escalation channel.
Before you escalate, collect every document below and store it outside the cloud you are fighting with. Email a copy to yourself on a different provider.
The order matters. Each step builds the paper trail the next step expects.
Use the Trash or Recently Deleted URLs in the 30-minute plan above. Restore everything you can, including items in folders you have not opened in years.
Every provider has a built-in “Contact support” or “Get help” link inside the account.
For a billing-related deletion, choose “Billing”, not “Data recovery”. The billing desk can restore a wrongly downgraded account.
If the in-app ticket does not resolve the issue, write to the India Grievance Officer the provider is required to publish under IT Rules 2021 Rule 3(2). Each provider lists this officer on a public page:
Use the sample email below. The officer must acknowledge within 24 hours and respond within 15 days.
If your plan lapsed because a card payment failed and the provider purged data without the warnings their policy lists (most promise at least one email warning and a 7-30 day grace), two parallel paths:
If the provider stays silent past 15 days, register a complaint at 1915 or on the NCH portal. NCH escalates to the provider's India compliance team and usually generates a response within 7 days. See the RTI Wiki walkthrough at https://righttoinformation.wiki/nch-1915-consumer-helpline-india.
If you paid for a plan and lost data the provider was bound to keep, you have a deficiency-of-service claim under Consumer Protection Act 2019 §2(11). File at e-Daakhil (district jurisdiction up to one crore). See https://righttoinformation.wiki/edaakhil-online-consumer-commission-filing-india for the filing walkthrough.
This step is not for accidental deletion or for a billing dispute. File it only when:
In any of those cases, call 1930 within the first hour, register at https://cybercrime.gov.in. Cite IT Act §43, §66, §66C, and BNS §318. The script at https://righttoinformation.wiki/1930-helpline-cyber-fraud-script tells you what to say.
A clean rule keeps you from wasting a station visit. The cyber cell is the right route in exactly these cases:
The cyber cell is the wrong route for:
For those four, the consumer route is the correct one, not the cyber route.
Copy this email, fill in the bracketed fields, and send it to the provider Grievance Officer with a copy to the in-app support thread and to your own backup email.
Subject: Grievance under IT Rules 2021 Rule 3(2): Unauthorized or wrongful deletion of cloud data, Account ID [your account email]
To, The Grievance Officer [Provider name] India
Sir or Madam,
I look forward to your written response within the statutory timeline.
Yours faithfully, [Your name] [Account email] [Phone, optional] [Date]
Send from a different mailbox so the response does not disappear into the broken inbox.
Pune design studio. Google Workspace, 200 GB of client renders. January 2026: corporate card expired, auto-renewal failed, two warning emails landed in Promotions. Workspace downgraded to free tier on day 5; renders above quota marked for deletion. Noticed on day 41 when a client asked for a revision. Trash empty; desktop sync had mirrored deletions to the Mac.
The proprietor paused sync, opened a billing ticket attaching the bank statement (a successful charge on 21 January, after the card-issuer block was lifted). Workspace billing reactivated the plan and restored 200 GB from the provider's retention copy on day 47, within the internal 60-day Workspace recovery window.
What saved the studio was the bank statement plus the “plan ended” screenshot on the first billing ticket - not the e-Daakhil filing the proprietor had begun to draft.
Cheapest insurance: a written 3-2-1 backup plan:
Concrete monthly habits that take less than 30 minutes a month:
Almost certainly not. Google Photos, Drive and Gmail each keep deleted items in a Trash for 30 days. Open https://drive.google.com/drive/trash and https://photos.google.com/trash on a laptop, select all, and Restore. Items older than 30 days are usually past the Trash window, but a paid Workspace plan has a longer internal recovery window your admin can request.
Apple keeps photos in Recently Deleted for 30 days. Open https://www.icloud.com/photos on a browser, sign in with the same Apple ID, open Recently Deleted in the sidebar, select all, and Recover. Then resubscribe to iCloud Plus before the 30-day window closes, since Apple may not move items back to your library if storage is still full.
A frozen OneDrive account keeps your files for 90 days, but the account is read-only, you cannot edit, upload, or open Office documents stored on it. You have 90 days to either delete enough files to come back under quota or upgrade. After 90 days, the account is permanently deleted, with no recovery.
Yes if you are within 30 days on Basic or Plus, 180 days on Professional, 365 days on Business. Open https://www.dropbox.com/deleted_files, filter by date, and restore. Then remove the ex-colleague from every shared folder, change your password, and turn on two-factor authentication. For a Business team, your admin can also see and restore events in the team audit log.
Possibly, but the trigger is almost always at the WhatsApp end, not Google. WhatsApp deletes its Drive backup if no new backup has been uploaded for one year, or if you signed in to WhatsApp on a different phone with a different Google account. Open https://drive.google.com/drive/quota and check whether a “WhatsApp Backup” entry still exists. If yes, reinstall WhatsApp on the same Google-account phone to pull it. If no, the backup is unrecoverable, and only a local Android backup file (sdcard/WhatsApp/Databases) can be restored.
This is the strongest deficiency case. Three parallel steps. One, raise a billing ticket inside the Google One account, attach the bank statement. Two, raise a card chargeback with your issuing bank within 120 days under reason code “Services not rendered”. Three, if Google does not restore within 15 days, file at e-Daakhil under Consumer Protection Act 2019 §2(11), since a deficiency that took your money and your data is the textbook case.
Yes. Unauthorized access plus deletion is an offence under IT Act §43(d) and §66, and if there was any impersonation (the attacker contacted your contacts from your account), also BNS §318. Call 1930 within the first hour, register at https://cybercrime.gov.in, and in parallel use https://iforgot.apple.com to start the Apple account recovery. Apple will not restore data without the security verification flow, so do not delay the iforgot step.
If you are on Dropbox Professional, you have 180 days. On Business, 365 days. On Basic or Plus past 30 days, you can still request a one-off recovery from Dropbox support, which sometimes succeeds within their internal retention window for a short period after the 30-day mark, but this is discretionary. In parallel, file at e-Daakhil for deficiency, since a Basic plan that promised 30-day recovery and gave you 27 is itself a breach worth contesting.
By law, 24 hours for acknowledgement and 15 days for resolution, under IT Rules 2021 Rule 3(2). In practice, Google and Microsoft acknowledge within hours, Apple within a day, Dropbox within two days. If you do not hear back within 24 hours, that silence itself is a separate violation worth citing on your e-Daakhil form.
Yes. Under the Digital Personal Data Protection Act 2023, §11, you may ask the Data Fiduciary for a summary of personal data processed and activities undertaken. In your Grievance Officer email, ask explicitly for “the exact date, time, IP address, device fingerprint and trigger of each deletion event on my account”. Workspace and OneDrive for Business admins have a real-time audit log they can already pull. Personal-tier accounts depend on the provider's discretionary cooperation, but the request is a recorded data-rights request that strengthens any later filing.
No. e-Daakhil is built for citizens to file in person. The court fee for a claim up to five lakh rupees is zero. Upload your evidence pack, draft the complaint in plain English citing Consumer Protection Act 2019 §2(11), and attach the unanswered Grievance Officer email. Most cloud-deficiency matters settle at the first or second hearing, since the provider's India counsel prefers a restoration or refund over a published order.