Cloud Sync Is Not a Backup

A mirror is not a safety net

A backup is a copy of your photos as they were at some point in the past. Sync is a copy of your photos as they are right now. That difference is the whole article.

Sync services are not shy about this. They document it as the feature it is:

• Apple: “If you use iCloud Photos, and delete photos and videos from one device, the photos and videos will be deleted on your other devices.”
• Microsoft: “If you add, change, or delete a file or folder in your OneDrive folder, the file or folder is added, changed, or deleted on the OneDrive website and vice versa.”
• Google: items deleted from Google Photos are also removed from phones and tablets that have the app installed with backup turned on, and from shared albums.

None of that is a flaw. It is exactly what you asked the service to do. But it means a folder deleted by accident, a file quietly corrupted by a failing drive, or a library encrypted by ransomware is replicated to every other device, faithfully and within seconds. The cloud copy does not save you, because the cloud copy is the same copy.

The 30-day clock you are already on

Every major service has a trash, a recycle bin or a “recently deleted” album, and every one of them empties itself. This is the safety net most people are unknowingly relying on, and it is measured in weeks. The figures below come from each provider’s own support documentation and apply to consumer accounts.

Read that table again with a real scenario in mind. A folder of holiday photos deleted in March is not recoverable in June. Nobody sends you a reminder on day 29. And the failure people actually experience is rarely dramatic — it is a phone tidy-up, a shared album cleared by a family member, or a folder dragged into the wrong place months before anyone notices.

The recovery features you may not have

Providers do offer proper rollback tools, and they are genuinely good. The catch is that on consumer accounts they are usually attached to a paid tier, and people assume they have them when they do not.

• OneDrive “Restore your OneDrive” can undo every action taken on your files and folders in the last 30 days — the single best answer to a mass deletion. Microsoft documents it as a feature for Microsoft 365 subscribers.
• OneDrive ransomware detection notifies you and walks you through recovery. Microsoft’s own wording is precise and worth knowing: if you are not a subscriber, your first notification and recovery is free. One.
• Dropbox Rewind rolls an account or folder back to an earlier point in time. Dropbox lists it as available on its paid plans, not on free Dropbox Basic.
• Google publishes no comparable consumer-account rollback for Photos or Drive that we could find documented. Recovery there means the trash, within the windows above.

The honest summary: if you are on a free tier, your entire safety net is a bin that empties in about a month.

3-2-1, in plain English

The rule is older than the cloud and has outlived every technology it was written for. The US Cybersecurity and Infrastructure Security Agency states it as three copies of important files, on two different types of storage media, with one copy stored off-site. The UK’s National Cyber Security Center publishes the same guidance in its 10 Steps collection: at least three copies, on two devices, with one off-site backup.

It is pleasing that photographers can claim it. CISA’s own Data Backup Options paper credits the rule to Peter Krogh’s The DAM Book: Digital Asset Management for Photographers, second edition, page 207, published by O’Reilly in 2009. It was written for people with irreplaceable image libraries, which is precisely who is reading this.

You will also see “3-2-1-1-0” quoted. It is a reasonable extension, but it comes from the backup industry rather than from any standards body, so treat it as a vendor recommendation rather than official guidance.

What 3-2-1 looks like for a photo library

Translating the rule into something you can actually set up on a Sunday afternoon:

1. Copy one — the master. One library, on one drive, that you treat as the original. It should not be your Windows C: drive, and it should not sit inside a sync folder. Our guide to choosing a library drive covers the trade-offs; PDR’s Library Drive Advisor will also compare the drives already connected to your PC and warn you if you are about to put the master on the system drive.
2. Copy two — a different medium, in your house. An external drive or a NAS, updated on a schedule you will keep. This is the copy you restore from when a drive dies, because it is fast and it is yours. A second folder on the same drive does not count.
3. Copy three — off-site. This is where the cloud is genuinely excellent. Fire, flood and theft take everything in one building, and nothing else solves that. Use the cloud as the third leg, not as the first.

If the three copies feel like a lot, notice what changed: the cloud has moved from being your backup to being one third of it. The work is in creating copy two, which is one drive and one scheduled job.

The part that catches photographers out

There is a failure mode specific to photo libraries that generic backup advice never mentions: you can get all your files back and still lose your library.

Photos carry their capture date in metadata. When a photo makes a round trip through a cloud service — uploaded, then pulled back down through an export or a bulk download — that date often does not survive the journey intact. Exports arrive with the capture date sitting in a separate sidecar file rather than in the photo, or with every file stamped with the date you downloaded it. The pixels are fine. The chronology is gone, and a library you cannot sort by date is a pile.

This is the strongest practical argument for keeping a real local master rather than treating the cloud as the original. A local copy never round-trips, so it never loses its dates. And if you are recovering from an export that already lost them, that damage is repairable — our walkthroughs on fixing wrong photo dates and Google Takeout and iCloud exports cover how the dates are reconstructed from the evidence in the files rather than guessed at.