A backup service can be trustworthy while still storing your files, because what matters is whether it can read them. “Doesn’t store a single byte of my data” is almost never literally true. A service that keeps your backups holds encrypted objects, and it usually also holds account details, file sizes, timestamps, and logs. The useful questions are which bytes the provider holds, and who holds the keys that turn those bytes back into your files.
What “not a single byte” would have to cover
The claim can mean several different things, and each one is checkable on its own. Before you accept a backup app’s promise, break it into the categories below and ask the vendor about each one.
As an Amazon Associate I earn from qualifying purchases.
| Data category | Can the provider hold it? | Why it matters for trust |
|---|---|---|
| Plaintext file contents | Should not, if the app encrypts before upload | This is the core promise. It holds only if encryption happens on your device or in software you control, before anything leaves it. |
| Encrypted backup contents (ciphertext) | Yes, in the architectures described below | The provider stores the bytes but cannot read them without the keys. This is the most common honest version of the claim. |
| Encryption keys | Depends on the design | If the provider holds the keys, it can usually read the data. If you or your own devices hold them, it generally cannot. |
| File names, paths, sizes, and timestamps | Possible, depending on the design | Content can be encrypted while metadata stays visible. Metadata alone can reveal a lot about how you work. |
| Account data such as email address, billing, and device identifiers | Usually yes | Needed to run the service. Encrypting file contents does not hide it. |
| Logs and support records | Depends on the vendor | Only the vendor’s written policy can answer this. Marketing pages rarely do. |
A provider that says it stores “no data” in the strict sense would have no account records, no billing, and no working storage. That is not a backup service. The trust question is therefore not whether bytes exist on the provider’s side, but whether those bytes are unreadable to the provider and whether the rest of the data is disclosed.
Three key arrangements you will see in practice
Most backup and cloud-storage products fall into one of three arrangements. The differences decide what the “no data” claim actually means.
#1 Best Overall
- Easily store and access 2TB to content on the go with the Seagate Portable Drive, a USB external hard drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Provider-held keys: standard cloud encryption
Apple’s default iCloud data protection encrypts data both in transit and at rest, but the keys are kept in Apple data centers so that Apple can help you recover your data. In this model, encryption protects against outsiders and stolen storage media, but it does not stop the provider from reading your backups. Apple describes this arrangement in its iCloud data security overview.
User-held keys: end-to-end encrypted backup
Apple’s optional Advanced Data Protection for iCloud changes the key custody. With it turned on, iCloud Backup is end-to-end encrypted, and the keys are available only on your trusted devices. Apple’s current requirements depend on your account and device configuration, so check the steps in its guide to turning on Advanced Data Protection for iCloud before relying on it. This is the clearest example of a provider that stores your backup but has no means to read it.
Vendor-described client-side encryption
Some backup vendors describe their products as encrypting data locally and keeping keys away from the provider. Comet Backup’s security page describes AES-256 encryption and immutable storage, and Tresorit’s zero-knowledge encryption page describes provider-inaccessible keys. These are the vendors’ own statements about their designs. They are useful starting points, but they are not independent verification of any specific product, and the “zero-knowledge” label does not by itself prove how a particular app handles keys or metadata.
Rank #2
- Easily store and access 1TB to content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop. Reformatting may be required for Mac
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
What WhatsApp’s encrypted backup design shows
Meta Engineering’s September 2021 post on end-to-end encrypted backups for WhatsApp states the design goal plainly: “neither WhatsApp nor the backup service provider will be able to access their backup or their backup encryption key.” This is a useful example of an encrypted backup stored remotely that the operator cannot read. It is a statement about the design announced in 2021, not a current audit, and it does not claim that the backup service stores nothing. The backup exists on remote storage; the point is that it is unreadable to the parties who store it.
The trade-off is recovery
Keys that the provider cannot access also mean the provider cannot rescue you. Apple’s support guidance makes this explicit: “If you use Advanced Data Protection, you’re responsible for your data recovery.” That sentence, from Apple Support, is the most important practical fact in this whole discussion. It means that a forgotten password, a lost set of trusted devices, or a locked account can leave your backup permanently unreadable, even though the provider still holds it.
Before you depend on an end-to-end backup, check what happens in each of these situations:
Rank #3
- High capacity in a small enclosure – The small, lightweight design offers up to 6TB* capacity, making WD Elements portable hard drives the ideal companion for consumers on the go.
- Plug-and-play expandability
- Vast capacities up to 6TB[1] to store your photos, videos, music, important documents and more
- SuperSpeed USB 3.2 Gen 1 (5Gbps)
- You forget the account password.
- You lose every device that holds the decryption keys.
- Your account is locked or suspended.
- You need to restore on a new device that you have not yet trusted.
How to verify a backup app’s claim
Use these steps to test any backup app, including the one in the title. You do not need access to its source code to do most of them.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- Get the scope in writing. Ask the vendor to state, separately, whether it can access plaintext content, encrypted content, file metadata, account data, and logs or support records.
- Confirm where encryption happens. Look for wording that says data is encrypted on your device before upload. If the documentation only mentions encryption “at rest” on the provider’s servers, the provider probably holds the keys.
- Identify who holds the key. Find out whether the key is derived from your password, stored on your devices, or held by the provider. Then ask what the vendor does if you lose your password.
- Run a test restore. Restore a known file to a second machine using only your account, not the original device. Expected result: the file opens and matches the original. If the restore fails, you have found the problem while it is still cheap to fix.
- Write down your recovery path. Store whatever recovery material the vendor provides in a safe, separate place, and confirm that you can use it.
- Look for independent review. A dated third-party audit with a stated scope is evidence. A security page full of certifications is not.
What the “no data” claim does and does not protect against
Provider-inaccessible keys protect your backup from the provider’s own staff, from people who gain access to stored copies without the keys, and from disclosure requests that the provider can only answer with ciphertext. They do not protect against:
- A compromised device, since the keys often live there and malware running on it can see what you can see.
- A weak account password or a takeover of your account by phishing.
- Metadata analysis, where file names, sizes, and timing reveal information even though the contents are encrypted.
Where trust should come from
The author’s trust in the title is a reasonable starting point only if it rests on the app’s documented design. The slogan that the app stores “not a single byte” is not evidence on its own, and this article cannot confirm it because the app is not named. What you can check is whether the provider holds ciphertext, who holds the keys, what metadata is visible, and whether you can restore on your own. An app that answers those four questions clearly deserves more trust than one that answers with a single line of marketing copy.
For Apple’s own technical detail on how iCloud Backup protection works, the Apple Platform Security guide’s iCloud Backup security section (dated 7 December 2022) is the primary reference to read alongside the support pages above.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →
