Mac Data Recovery in Buffalo, NY

Mac Data Recovery for MacBook, iMac, Mac mini, and Mac Studio

Your MacBook won't turn on. Your iMac is showing a flashing folder with a question mark. Your external drive that held years of photos suddenly isn't recognized. You deleted a folder from Photos and realized too late that it had irreplaceable images. Whatever the situation, we can help. We're a drop-off computer repair shop in Buffalo, NY, and Mac data recovery is one of the things we do regularly. Bring the Mac (or just the drive, if it's external) and we'll evaluate it for free, give you an honest assessment of what's recoverable, and quote a real number before any work begins.

Mac data recovery is genuinely different from PC recovery. The file systems are different (APFS on modern Macs, HFS+ on older ones, both completely separate from the NTFS that Windows uses). FileVault encryption is enabled by default on a lot of Macs, which changes everything about the recovery process. Apple Silicon Macs (M1, M2, M3, M4) have storage soldered to the logic board, which means recovery requires different techniques than the swap-in-an-external-enclosure approach that works on most PCs. iMacs require careful disassembly to access the drive. Time Machine drives have their own quirks. We know all of this and have the tools and experience to handle it.

We service every Mac currently in use: Apple Silicon MacBook Air and Pro across all M1/M2/M3/M4 generations, every Intel MacBook generation back to the early 2010s, all the iMacs from the white plastic ones forward, Mac mini through every generation, Mac Studio, the older Mac Pro towers, and Time Machine and external drives connected to any of these. The specifics of the recovery vary by model and macOS version, but the goal is always the same: get your data back if it's recoverable, tell you honestly if it isn't.

What's Different About Mac File Systems

If you've only dealt with PC recovery, the Mac side has some genuinely different considerations:

APFS (Apple File System) is what every modern Mac uses. Introduced in 2017, it became the default for all Mac storage in macOS High Sierra and later. APFS supports copy-on-write (which means data isn't overwritten in place, it's written to new locations and the old version becomes available for cleanup), snapshots (point-in-time captures of the file system), container/volume separation (multiple logical volumes share physical space), and encryption-by-default on most installations. All of this makes APFS more sophisticated than HFS+ but also more complex to recover. Recovery tools have to understand APFS's specific structure, and not all data recovery software handles it well.

HFS+ (also called Mac OS Extended) was the standard Mac file system from Mac OS 8.1 in 1998 until APFS replaced it in 2017. HFS+ is still used on some external drives, on Time Machine backup drives in many cases, and on older Macs that haven't been migrated to APFS. HFS+ recovery is well-established and the tooling is mature.

FileVault encryption is the wild card. FileVault is full-disk encryption that's been opt-in since Lion in 2011 and increasingly aggressive about being enabled by default on newer Macs and macOS versions. With your password, FileVault is no obstacle to recovery. Without your password, the data is mathematically secure and recovery is impossible. There's no back door. We need the password (or the recovery key, if you saved one to your Apple ID) to get to your data on a FileVault-encrypted Mac.

Fusion drives on older iMacs from 2012-2017 combined a small SSD with a large spinning drive that macOS treated as one logical volume. Fusion drives complicate recovery because data can be split across both physical drives with macOS managing what goes where. If one of the two physical drives fails, recovery from a Fusion drive is harder than from a single drive. We handle these but they take more time.

Mac Data Loss Scenarios We Handle

The categories we see most often, in rough order of frequency:

• MacBook won't turn on: the most common Mac data recovery scenario. Could be a logic board issue, a battery issue, a charging issue, or storage failure. We evaluate to determine which it is. Most cases turn out to be recoverable.
• Question mark folder at boot: macOS can't find a bootable drive. Sometimes the drive is fine and macOS just lost track of it; sometimes the drive has actually failed. Recovery path depends on which.
• Frozen Apple logo at boot: macOS started loading but got stuck. Usually a software issue rather than a data issue. We can pull files off and either repair the macOS install or migrate to a new drive.
• Deleted files from Photos, Mail, or Finder: classic deletion recovery. Possible if the Mac hasn't been heavily used since the deletion. Faster is better.
• External drive not recognized: the drive worked yesterday and doesn't today. Could be the drive itself, the enclosure, or the USB controller. We sort it out.
• "Disk not readable" or "needs to be initialized" prompt: macOS can see the drive but can't make sense of the file system. Recovery is usually possible without initializing (which would erase everything).
• Liquid damage on a MacBook: spilled drink on the keyboard, set the MacBook on a wet counter, got caught in the rain. The Mac may or may not work, but the data on internal storage is often recoverable with the right approach.
• Time Machine drive failure: the backup drive itself fails. We can recover the actual files from a failing Time Machine drive even if the snapshot structure is damaged.
• Failed iMac: the iMac won't boot, makes no sound, or shows visual artifacts. Recovery usually involves removing the drive (carefully, since iMacs are difficult to open) and reading it externally.
• Apple Silicon Mac with logic board failure: the hardest Mac recovery scenario. Storage is soldered to the logic board, so when the board fails, we can't just swap drives. Clean room chip-off recovery is the path. Expensive but possible.
• Forgotten password on a non-FileVault Mac: we can sometimes reset macOS user passwords or pull data from the drive externally. FileVault-encrypted Macs without the password are not recoverable.
• Migration mistakes: someone tried to migrate to a new Mac and something went wrong, leaving files in an unclear state. We sort out where the data actually is.

How Apple Silicon Changed Mac Recovery

This is worth a section of its own because it changed the Mac recovery landscape genuinely.

On Intel Macs, internal storage was always either an SSD on a removable connector or a SATA drive. If the Mac itself failed but the storage was intact, we could remove the drive, connect it to a working machine through an external enclosure, and read the data normally (assuming FileVault wasn't blocking us). This worked on every MacBook, iMac, and Mac mini Apple shipped between roughly 2009 and 2020.

Apple Silicon Macs (M1 and later) changed this entirely. The flash memory chips are soldered directly to the logic board rather than living on a removable component. This is part of how Apple Silicon achieves its performance and efficiency, but it has a real impact on recovery: when the logic board fails on an Apple Silicon Mac, we can't swap drives the way we used to. Data recovery becomes either:

Soft recovery if the Mac partially works. If the Mac will boot, even into recovery mode or DFU mode, we can sometimes pull data using Apple-specific tools and a second working Mac connected via Thunderbolt. This works for cases where macOS is broken but the hardware is fine.

Chip-off recovery if the logic board has failed. If the logic board genuinely doesn't work at all, the only path to recovery is desoldering the storage chips and reading them with specialized lab equipment. This is clean room work, performed by labs that specialize in this kind of recovery. Success rates are decent but the work is expensive.

We coordinate Apple Silicon clean room recoveries with vetted labs when needed. We'll explain the costs and odds during evaluation so you can decide whether to proceed.

Mac Drive Recovery Process

1. Scheduled drop-off and intake.You call to set up a time, you bring the Mac in. We talk through what happened, when it started, what (if anything) you've already tried.
2. Free evaluation.We power on the Mac (or attempt to), check its state, and figure out what category of failure we're dealing with. For external drives, we connect them to test equipment and observe behavior. We assess whether FileVault is involved, whether the storage seems healthy or sick, whether boot is possible, and what the recovery path looks like.
3. Honest assessment.We tell you what we found and what's likely recoverable. If recovery isn't feasible (it sometimes isn't, especially on Apple Silicon Macs with full board failure), we say so rather than running up costs on a hopeless case.
4. Quote.For recoverable cases, we give you a real number. Logical recovery on an Intel Mac is the most affordable. Apple Silicon recovery requiring clean room work is the most expensive. You decide whether to proceed.
5. Forensic imaging where needed.For drives that are sick or showing errors, the first step is making a complete bit-for-bit image onto healthy storage. This protects the original from further damage during recovery work.
6. Recovery work.Depending on the case: APFS recovery tools on an image, HFS+ recovery on older Mac drives, file system reconstruction, signature-based file recovery for severe corruption, or coordination with a clean room lab for physical damage.
7. Verification with you.We show you what we recovered and confirm the important files are there. If your priority files weren't recovered, we have an honest conversation about whether deeper work makes sense.
8. Delivery on fresh storage.Recovered data goes onto a new drive (yours or one we sell you), never back onto the failed drive. We destroy our copies according to your preference.

Mac Drive Symptoms Worth Taking Seriously

Don't ignore these. Bring the Mac in for evaluation if you're seeing them:

• The Mac freezes during normal use, especially when reading large files
• "The disk you inserted was not readable" appears repeatedly
• macOS reports "this disk needs to be repaired" via Disk Utility
• A previously-working external drive isn't recognized today
• Time Machine backups have been failing repeatedly
• Files take noticeably longer to copy than they used to
• The Mac has restarted unexpectedly several times recently
• You see SMART warnings in About This Mac > System Report
• Disk Utility shows "verify failed" on a volume
• Photos or other apps show "this file cannot be read" for files that used to work
• The Mac boots to a gray screen, prohibitory sign, or kernel panic
• Boot times have gotten dramatically slower over a short period

The most important thing if you're seeing these signs: stop using the Mac for anything that matters. Power off if you can. Bring it in. Continued use of a sick drive can take it from "recoverable with effort" to "not recoverable" surprisingly fast.

What We Need From You for Mac Recovery

Most importantly: your local user password if FileVault is enabled. We don't need any other passwords. Not your Apple ID. Not iCloud. Not banking or any other accounts. Just the local password to log into the Mac.

If you don't remember the local password but you know your Apple ID and have FileVault recovery key escrow turned on, we can sometimes retrieve the recovery key through your iCloud account. We can help you check.

If FileVault is not enabled, we don't need any passwords. We can pull data off the drive directly.

If the Mac is unbootable and FileVault is enabled and you don't have the password and you didn't escrow the key with Apple, the data is unrecoverable. This is genuinely true. FileVault is designed specifically to be unbreakable without the credentials, which is the whole point of disk encryption. We don't want to be the bearers of bad news, but we will be honest about it.

Mac Models We Recover Data From

Pretty much everything Apple has shipped, in roughly two big categories:

Apple Silicon (M1, M2, M3, M4): MacBook Air, MacBook Pro, iMac (24-inch), Mac mini, Mac Studio, Mac Pro 2023. Recovery on working logic boards: high success rates. Recovery requiring clean room chip-off: moderate success rates, higher cost.

Intel Macs: MacBook Air (2013-2020), MacBook Pro (Touch Bar models 2016-2021, Retina 2012-2015, pre-Retina), MacBook 12-inch, all Intel iMac models, Intel Mac mini, Mac Pro 2019, older Mac Pro towers. Recovery on these is generally more straightforward because storage can typically be removed and read externally. Higher overall success rates.

External drives connected to any Mac: portable hard drives, desktop external drives, RAID enclosures, USB drives, SD cards. Recovery is roughly the same as PC drive recovery, with HFS+ or APFS file systems on the Mac side or possibly exFAT/NTFS on cross-platform drives.

Time Machine drives: backup drives that failed. Recovery returns the actual backed-up files; the snapshot history may or may not be intact, but customers usually just need their files back.

Common Mac Recovery Scenarios

The MacBook that won't boot the day before a deadline

Classic scenario: a writer, designer, student, or professional whose MacBook has stopped booting and they need files for something due in days. Most of the time the storage is fine and we pull data off within 24-48 hours, hand back a USB drive with the files, and they make their deadline. We treat genuinely urgent cases as urgent when we can.

The iMac that died after a power surge

Power surge during a thunderstorm took out an older iMac. The screen is dark, no chime, no fan. We open the iMac (carefully), pull the drive, and read it externally. Usually recoverable. The iMac itself often needs replacement after a serious surge, but the data is intact.

The MacBook with the spilled coffee

Liquid damage on a MacBook. The customer powered it down quickly and dried it. We open the Mac, assess the damage to the logic board and storage, and recover what's recoverable. Sometimes the Mac itself is salvageable too. Sometimes the data is the only thing we save and the customer ends up buying a new Mac.

The "I emptied the wrong folder" panic

A Mac user was cleaning up files and emptied the trash before realizing something important was in there. They called us within hours. We brought the Mac in, ran APFS recovery, pulled back the deleted files. The faster the customer acts, the better the odds.

The dead external drive holding a decade of photos

An external drive that held years of family photos suddenly isn't recognized. We open the enclosure, find the drive itself is healthy but the USB-to-SATA bridge has failed. We connect the drive directly, copy the data to fresh storage, and the customer leaves with their photos.

The forgotten Apple ID FileVault key

A customer with a FileVault-encrypted Mac whose drive failed. They didn't remember their local password. They didn't escrow the recovery key. The data is unrecoverable. This is the hard conversation we sometimes have to have. We always tell people upfront if FileVault is the obstacle and there's no key available; we don't want to charge for hopeless work.

Why Choose Us for Mac Data Recovery in Amherst

Mac recovery requires Mac-specific knowledge. The tools and techniques are different from PC recovery, the file systems are different, the encryption is different, the hardware is different. Generic data recovery shops sometimes treat Mac drives like PC drives and miss things. We work on Macs every day and know the platform.

The work happens here. Most Mac recovery happens in our shop, on our bench. Clean room work is sent to vetted labs when needed, but we manage the process and you don't have to deal with a third party directly.

Free evaluation, honest assessment. We tell you what's recoverable and what isn't. If FileVault is blocking us with no password available, we say so. If the data is gone, we say so.

No recovery, no charge. If we attempt recovery and don't get usable data, you don't pay for our work. The exception is clean room labs with evaluation fees, which we tell you about upfront.

Privacy of your recovered data. We don't look through your photos or read your messages. We verify recovery worked and hand back your files. After delivery, our copies are destroyed.

We're located on North French in the Amherst / Tonawanda area, easy access from I-290, Sheridan Drive, Maple Road, and Niagara Falls Boulevard. From the UB North Campus, Williamsville, Tonawanda, Kenmore, or anywhere in North Buffalo, we're a short drive. Parking is right at the building.

What to Do Right Now If Your Mac Has Lost Files

Stop using the Mac for anything important. Don't install software hoping it will fix things. Don't run "Mac repair" tools you found online; some of those make recovery harder.

If the Mac is making unusual noises (clicking from a spinning drive in an older iMac, or any other sound that wasn't there before), power it off immediately and leave it off.

If liquid was involved, don't turn the Mac on. Don't use a hair dryer on it. Don't put it in rice. Just dry the outside as best you can and bring it in.

If you forgot your password, don't keep trying to guess. Each failed attempt risks lockouts that can complicate recovery. We can sometimes reset macOS passwords if FileVault isn't involved.

Find your Apple ID and recovery key if you have them. If FileVault is enabled, this might be necessary for recovery.

Call us at 716-771-2536 to schedule an evaluation. Mention briefly what happened so we can plan accordingly.

What APFS Snapshots Mean for Recovery

Worth a section because this is genuinely useful and often misunderstood. APFS keeps automatic snapshots of the file system at certain points (Time Machine triggers them, certain macOS operations create them, manual snapshots can be made). A snapshot is essentially a frozen-in-time view of the entire file system.

For recovery purposes, snapshots are valuable: if a snapshot exists from before a deletion or corruption, the data is potentially preserved in the snapshot even if the live file system has been modified. We check for snapshots as one of the first steps in APFS recovery, and when they exist they often dramatically speed up the recovery process.

The catch: snapshots are stored on the same drive. If the drive itself has failed mechanically, the snapshots fail with it. If macOS automatically deleted snapshots to free space (which it sometimes does when space gets tight), they're gone too. Snapshots are a useful recovery tool when they exist, but they're not a substitute for real backup.

For Time Machine drives specifically, the snapshot history can sometimes be partially recovered even when the drive is failing. We've pulled multi-month backup histories off Time Machine drives that customers thought were dead.

iCloud, Backups, and What Counts as "Saved"

A common Mac data recovery misunderstanding: customers assume their files are "in iCloud" and therefore safe, only to discover the situation is more complicated.

iCloud Drive syncs files between your Mac and Apple's servers. If you delete a file on your Mac, it deletes from iCloud Drive on your other devices. If your Mac fails and you had iCloud Drive enabled, the files are usually retrievable from icloud.com or another Mac signed into the same Apple ID. But this only includes files that were actually synced; files outside the iCloud Drive folder (and files in the iCloud Drive folder that hadn't finished syncing yet) are not protected.

iCloud Photos syncs your Photos library between devices. Same model: deletions sync, files in transit may not be protected, only the Photos library is covered.

Desktop and Documents Sync (a feature of iCloud Drive) keeps the Desktop and Documents folders in iCloud automatically. This is a real backup-like feature for those folders specifically. Files outside Desktop and Documents are not covered.

Time Machine backs up the whole Mac to a connected drive (or Time Capsule). When it's working, it's a real backup with versioned history. When the backup drive itself fails, the backup is gone unless there's a second copy somewhere.

What none of these are: a real off-site backup that survives the loss of your Mac. iCloud comes closest because the files do live on Apple's servers, but it's a sync service rather than a backup service, and it doesn't have the deep version history that real backup services maintain.

For real protection, we recommend a real cloud backup service (Backblaze is what we usually suggest for Mac users) plus Time Machine plus iCloud, all running together. Different protections cover different failure modes. We can set this up as a separate service.

The macOS Recovery Mode Question

If your Mac will boot into macOS Recovery (Command+R on Intel, hold the power button on Apple Silicon), there are some tools that might help before you bring the Mac in for recovery work. Worth knowing what these are and what they can and can't do.

Disk Utility's First Aid attempts to repair file system errors on a drive. For minor corruption, it sometimes works. For serious problems, running First Aid on a sick drive can make things worse. We'd recommend not running First Aid if you suspect actual data loss; bring the Mac in instead.

Reinstall macOS in Recovery Mode is an option you should not use if you're trying to recover data. Reinstalling macOS, even the option that "preserves user data," can rearrange the file system in ways that complicate later recovery. If you're thinking about recovery, don't reinstall.

Restore from Time Machine in Recovery Mode is a valid path if you have a working Time Machine backup. This restores your Mac to the state of a previous backup, including all files that existed at that time. If your Time Machine backup is current and working, this might be all you need.

Migration Assistant in Recovery Mode can copy data from another Mac, a Time Machine backup, or a startup disk. Useful for moving to a new Mac. Not really a recovery tool for a failing drive.

If your Mac boots normally but you suspect data loss, don't use Recovery Mode for recovery. Bring the Mac in instead. Recovery Mode is more useful for system repair than for data salvage.

What to Bring When You Drop Off

To make the evaluation as fast and useful as possible:

Bring the power adapter. We need to be able to power the Mac during evaluation. Bring the original adapter or a known-working replacement.

Bring an external drive if you have one. Recovered data goes onto fresh storage, never back onto the failed drive. We can sell you an external drive if needed, but if you already have a healthy one with enough space, bring it.

Know your local user password. If FileVault is enabled (likely on any modern Mac), we need the local login password. Without it, encrypted volumes are unrecoverable.

Have your Apple ID handy. Sometimes we need to check whether you escrowed a FileVault recovery key with Apple. Knowing the Apple ID makes that check possible.

Know what you're trying to recover. Photos? Documents? Specific files in a specific folder? Knowing the priority files lets us focus the recovery and verify success against the things that actually matter to you.

Bring any error messages you've seen. Photos of error screens are helpful. Specific symptoms ("the screen shows a question mark folder," "it kernel panics every time it boots") are useful diagnostic information.

Service Areas for Mac Data Recovery

Customers regularly drop off Macs from across Western New York:

• Buffalo, NY
• Buffalo, NY
• Williamsville, NY
• Tonawanda, NY
• Cheektowaga, NY
• Clarence, NY
• Kenmore, NY
• Lancaster, NY

Frequently Asked Questions

Mac-specific questions about data recovery.

• My MacBook won't turn on. Are my photos lost?

  Probably not. A MacBook that won't turn on usually has perfectly intact data on the storage. The problem is typically a power issue, a logic board issue, or a software boot problem rather than actual data loss. We can pull the data off the storage even when the Mac itself won't start up. The exception is on Apple Silicon Macs (M1, M2, M3, M4) where the storage is soldered directly to the logic board and recovery is genuinely harder if the board itself has failed. We evaluate first and tell you which situation yours is.

• Do you need my Apple ID password to recover data?

  No, we don't want it and don't need it. What we need is your local user password (the one you type at the login screen or to wake the Mac) IF FileVault is enabled on the Mac. FileVault is macOS's full-disk encryption, and most modern Macs have it enabled by default. Without your password, the data is mathematically encrypted and unrecoverable.

  If FileVault is disabled, we don't need any password to access the data. Either way, your Apple ID, iCloud password, banking passwords, and similar are not part of what we need.

• My Mac says "the disk you inserted was not readable." Can you fix it?

  Often yes. That message usually means the drive's file system has been corrupted but the underlying data is still there. We can typically recover the files using specialized tools that read the raw drive content rather than relying on macOS to interpret it. Bring the drive in (or the whole Mac if it's the internal storage). The faster the better.

• Can you recover from APFS encrypted Macs?

  Yes, with your password. APFS (Apple File System, used on all Macs since 2017) supports encryption that's tied to your user account password. With the password, we can decrypt the volume and recover normally. Without it, the data is unrecoverable. There's no "back door" we can use; Apple designed FileVault specifically to be unbreakable without the credentials.

  If you don't remember your password but you know your Apple ID, sometimes the recovery key is available through your iCloud account. We can help you check.

• How does APFS recovery differ from older Mac file systems?

  APFS (used on all modern Macs) is genuinely more complex than the older HFS+ format. APFS uses copy-on-write, snapshots, container/volume separation, and encryption-by-default on most installs. This means APFS recovery requires tools specifically designed for the format, and the recovery process itself is more involved than HFS+ recovery. Success rates for APFS recovery are still good, but the work takes longer and the tooling is more specialized.

  HFS+ (used on Macs running Sierra 10.12 and earlier, plus Time Machine drives, plus some external drives) is well-established with mature recovery tools. Recovery from HFS+ is generally faster and more straightforward.

• My Time Machine drive failed. Can you recover the backups?

  Often yes. Time Machine drives use HFS+ (older Macs) or APFS (newer Macs) and can be recovered using the same tools we use for any Mac drive. The recovery returns the actual files that were being backed up, which is usually what you want. We can also sometimes recover specific Time Machine snapshots if those are intact, but more commonly customers just want their files back regardless of whether the snapshot structure is preserved.

• I deleted photos from my Mac. Time Machine doesn't have them. Can you get them back?

  Probably, if you stop using the Mac immediately. Photos deleted from Photos.app go through a "Recently Deleted" album for 30 days before final deletion. After that, the data is just marked as free space and remains recoverable until something writes over it. Bring the Mac in within a few weeks of the deletion and the odds are good. The longer you keep using the Mac after the deletion, the lower the recovery chances get.

• My Apple Silicon Mac (M1/M2/M3) won't boot. Different process?

  Yes, somewhat. Apple Silicon Macs have storage soldered directly to the logic board, which means we can't simply remove the drive and read it externally the way we would on an Intel Mac. If the Mac itself can be coaxed into booting (even into recovery mode or DFU mode), we can pull data using Apple-specific tools. If the logic board has failed completely, recovery becomes a clean room lab job involving chip-off recovery directly from the soldered storage. That's expensive but possible.

• My iMac won't turn on. Should I bring the whole iMac or just remove the drive?

  Bring the whole iMac, ideally on an appointment. Removing an iMac drive at home is genuinely difficult; iMacs are designed to be opened by Apple service personnel with specialized suction tools, and amateur attempts often crack the screen or damage the cabling. We have the tools to open it safely. If the iMac is from 2014 or later, the screen has to come off to access the drive, which means careful work.

• My MacBook's liquid damage indicator says it got wet. Recovery possible?

  Sometimes, depending on the extent of damage. Liquid that reaches the storage chips can sometimes be cleaned off and the storage read normally. Liquid that has corroded the storage controller or the storage chips themselves makes recovery harder. The most important thing if a Mac gets wet: don't turn it on. Power going through wet circuitry causes shorts that can permanently damage components. Power off, dry off, bring in for evaluation.

• Do I need an appointment for Mac data recovery?

  Yes, we work by appointment only. Call 716-771-2536 to schedule. Tell us briefly what happened (the Mac won't boot, files were deleted, the drive is making noise, water exposure, etc.) and we'll set up a time. Most appointments can be set up within a day or two. Genuinely urgent cases sometimes get same-day evaluation; let us know if you're in that situation.

• How much does Mac data recovery cost?

  Quoted after we evaluate. The evaluation is free. Logical recoveries (deleted files, corrupted file system, formatted drives) are the most affordable. Apple Silicon Macs that need clean room work for chip-off recovery are the most expensive. We give you a real number before any work happens. Call 716-771-2536 or request a quote.