Loading video...
Video Failed to Load
Claude Code found every "vanishing" photo from Instagram and every "self-destructing" message from Telegram on my iPhone. both apps promise the content disappears after you view it. neither one actually deletes it. i plugged my iPhone into my MacBook to run the same backup audit from my last post.... show more
202,316 views • 3 days ago •via X (Twitter)
20 Comments

the prompt i used: "scan this iPhone backup for cached media from Instagram vanish mode and Telegram secret chats. look for any photo, video, or voice message that should have been deleted but still exists in local storage. show total file count by app, date range, and which other apps currently have read access to those directories. read only, change nothing." paste it into Claude Code after the backup finishes. takes 2 minutes. mine came back with 15,100 files across both apps. every single one was supposed to be gone.

before anyone asks why i keep using Claude Code for these audits and not ChatGPT or Gemini. i tried. pasted the exact same prompt into both. GPT said "i can't assist with accessing deleted personal data from third party applications" and stopped. Gemini flagged it as a "potential privacy violation" and refused to run it. Claude Code was the only one that actually ran the scan and showed me what was on my own phone. my phone. my data. my files. and two out of three AI tools told me i'm not allowed to see it. make of that what you will.

if you have iCloud turned on this cache syncs across every Apple device on your account. i checked my iPad after finding this on my phone. same folders. same deleted photos. same 2 years of vanish mode files sitting right there. your "permanently disappeared" vanish mode photos from 2024 could be sitting on your iPad your little brother uses right now. or on your old iPhone you sold on eBay last year without wiping properly. go to Settings → Privacy & Security → Files & Folders. revoke everything you don't use daily. i went from 31 to 4 in two minutes.

we are about to open pandora’s box’s

nice try fbi...nice try

This is the only way

wont they be taking space and thus be easy to know that they are there?

Dude we are so cooked, this is a transitionary period for tech for sure

So much for «disappearing forever» and «total privacy»... Just another proof that once something hits a digital device, it’s there for good.

Anyone know if this can be done on a normal pc or is a MacBook needed?

If a pixel renders on your display, the raw framebuffer bytes already touched local disk cache and RAM. Ephemeral messaging has always been a client-side UI gimmick; expecting zero-knowledge privacy from Electron or mobile wrappers is pure wishful thinking.

If this claim is repeated without careful verification, people may revoke useful app permissions or panic over cache files that aren't accessible to other apps.

makes you wonder what disappearing messages actually guarantee deleting something from a chat and deleting it from a device are two very different things

recreate this for now is smart

This is concerning

🤔🤔

"vanishing" photos still sitting on the phone after you view them. plugging into the MacBook for the backup audit is the unsexy part that actually catches it

Holy shit, just ran this on my backup. 8,900 "deleted" files from the last year. The scary part isn't Instagram or Telegram - it's the 23 random apps with Files access that could've been reading all of it. Weather widgets, QR scanners, you name it. Did you check if any third-party apps actually accessed those cached folders?

same thing is about to happen with AI memory. "forget that" will remove it from the chat you see, not from the indexes and summaries built off it. Deletion has to follow the copies

I track my moods by moon phase, judge me gently
Related Videos
Sensitive content
Claude just found 1,244 photos of my 19y/o sister on a random server She never posted a single one of them… I was making a birthday post for her and reverse-searched an old photo of us from last Christmas Google found it on a site I'd never heard of. Just an open folder, no password Inside the folder - 4 subfolders: /gallery - 2,312 photos, sorted by date /screens - 1,140 screenshots of her bank app and WhatsApp /docs - her ID card, front and back /new - empty I refreshed the page /new - 1 file A selfie. Taken 4 minutes ago I called her. She had no idea I asked if I could check her phone. She said yes I plugged her Samsung into my laptop, turned on USB debugging and gave Claude Opus 5.5 one prompt: "Find whatever is sending this phone's photos to the internet" It scanned 214 apps in 90 seconds and stopped on 1 "System Sync" No icon. Hidden from the app drawer. Not from the Play Store Every permission it had, and what it used it for: accessibility → to read every screen she opened all photos → to copy her whole gallery mic + SMS + location → to know where she was and who she talked to device admin → so the "Uninstall" button stayed grey Then Opus decompiled the app and rebuilt its history: Day 1 - installed by hand, on her unlocked phone Day 2 - full gallery uploaded, 1,244 photos Day 3 - first screenshot of her bank app Day 41 - 1.8 GB sent, mostly between 1am and 5am And one line in the code - the server address The same site where I found her photos 96 screenshots and 87 new photos were still waiting in the upload queue What we did in the next hour: 1. Screen-recorded everything as evidence 2. Turned off device admin, then removed the app 3. Changed 14 passwords from my laptop, not her phone 4. Turned on 2FA everywhere 5. Reported the folder to the hosting company 2 days later the folder was gone But someone held her unlocked phone for a few minutes, 41 days ago She still doesn't know who Your must have 3-minute check tonight after saving this post: 1. Battery - anything draining power with the screen off 2. Photos - only your camera and gallery need "all photos" 3. Accessibility - every app there needs a reason to be there 4. Device admin - most people only need "Find My Device" 5. Hidden apps - no icon + "system", "sync" or "health" in the name = check it Found something? Don't delete it on the spot. Screenshot everything, then remove it and change your passwords from a different device Prompt below ↓
Raytar
2,029,912 views • 4 days ago
