Your lost data is sensitive. We treat it that way.
DataRecover Pro is engineered so that recovering your files can't expose them — to the internet, to us, or to anything else on your Mac.
Your files never leave your Mac
Recovery and repair run entirely on your machine. The contents of your files are never uploaded, streamed, or stored anywhere. There is no cloud step.
We never see your file names
DataRecover Pro is built to never transmit or log the names, paths, or contents of files on the drives you scan — by design, not by policy.
Read-only by default
Scanning opens your source drive read-only, so the recovery process physically cannot overwrite the data you're trying to get back.
Sandboxed repair
File-repair plugins run in isolated worker processes with no network access and no ability to write to your filesystem — corrupted input can't compromise your Mac.
Notarized & code-signed
Every release is signed with an Apple Developer ID and notarized by Apple, and the app verifies its own signature at runtime.
Privileged work, properly isolated
Raw disk access runs in a separate, audited helper — never in the UI — so the app holds the minimum privileges needed and nothing more.
What your account stores
The only data tied to your account is what's needed to manage your license: your email, a securely hashed password, and the devices you've activated. Payments are handled by Stripe — we never see or store your card details. Full details are in our Privacy Policy.
- ✓ Email + Argon2id-hashed password
- ✓ Activated device identifiers
- ✓ License & subscription status
- ✕ Never: your files, file names, or card numbers