What actually happens when you hit delete

Hitting delete feels final. On the storage hardware inside every modern phone and laptop, it usually isn’t — and understanding why changes how you should think about protecting anything sensitive at the end of its life, not just at the start.

What actually happens on an SSD

Solid-state drives don’t overwrite data in place the way older spinning hard drives did. To manage wear across the chip and keep write speeds fast, an SSD’s controller quietly relocates "deleted" data to different physical cells behind the scenes, and the original blocks are often left readable for a period of time before the drive gets around to actually clearing them. In practice, this means a phone can report a file as deleted while a technically capable attacker with physical access to the drive can still recover it, weeks later.

This is not a Prevon-specific flaw — it is a property of how modern flash storage works, full stop, and it is one of the reasons "just delete it" was never a sufficient answer for genuinely sensitive information.

The fix: stop chasing the data, destroy the key

If you can’t reliably guarantee every copy of a file is gone, the answer is to make sure none of those copies matter anymore. That is the idea behind what we call digital cremation. Instead of trying to find and overwrite every relocated fragment of your data, wiping a Prevon vault destroys the only key that could ever make sense of it — the Master Key itself.

The moment you wipe your vault, every copy of your data on that drive — the one you were using, and the hidden ones the drive kept behind your back — instantly becomes unreadable static. There is nothing left to erase, because nothing left can be understood.

This is also the underlying logic behind key rotation, not just full wipes. A "fast rotation" re-keys your vault in under a second for routine safety. A "full rewrite" decrypts and re-encrypts every note under a brand-new key when you suspect real compromise — a lost device, a stolen password — then destroys the old key. Anything an attacker copied earlier, before the rotation, becomes permanently unreadable to them, even though the bytes themselves may still technically exist somewhere on a drive. The data isn’t gone. It just no longer means anything.

It is a small shift in framing — from "did we successfully erase this?" to "is there still a key that could unlock this?" — but it is the difference between a promise and a guarantee.