Water-Damaged iPhone Data Recovery

Why Water Kills iPhones

Water itself does not destroy the phone. Corrosion does. When water reaches the logic board, it reacts with metals on component pins and traces.

This creates conductive corrosion that shorts power circuits. The phone may work for hours or days after exposure before enough bridges form to kill a critical power rail.

The most vulnerable areas are under the RF shields, where water gets trapped and cannot evaporate. Tiny capacitors and resistors on PMIC power lines corrode first because they carry voltage. Once a power rail shorts, the phone shuts down and will not turn back on.

Can Data Be Recovered From a Water-Damaged iPhone Motherboard?

Usually yes. Your files sit on a NAND chip soldered to the motherboard, & liquid does not erase them. What fails is the power circuitry around that chip. We clean the corrosion, replace the shorted components, & boot the original board so it decrypts its own data.

On an iPhone the motherboard & the logic board are the same board; Apple calls it the logic board, & most people call it the motherboard. Both names describe the one PCB carrying the SoC, the NAND, & the power circuitry that an iPhone data recovery job on this bench depends on.

Liquid gets in through the speaker mesh, the charging port, the SIM tray, & the seams around the display, then wicks under the metal RF shields soldered over the board. Those shields are the problem. They trap contaminated water against the exact components they cover, so the outside of the phone dries while a film of pool chlorine or seawater stays on the board.

On iPhones with a SIM tray, Apple puts a liquid contact indicator in the tray slot that turns from white to red on contact, & that strip is what Apple reads to deny warranty coverage on a liquid-damaged phone.

PP_VCC_MAIN is the usual casualty. It is the main system power rail downstream of the battery, it runs across the whole board, & corrosion bridging it to ground has current available from the second the liquid lands. Once that rail shorts, the phone is dead. No charger, no battery swap, & no screen replacement changes that, because the fault is a component sinking the battery straight to ground.

Ultrasonic cleaning comes first on the bench, & it is the step that decides the outcome. Corrosion does its worst work under the BGA pads of the PMIC & beneath the shields, where no towel, brush, or bag of rice reaches. Cavitation in an ultrasonic bath does reach it. Soldering on a board that skipped that step means the corrosion keeps eating the traces under the parts you just replaced.

Then we localize the short before the iron ever comes out. The bare board goes on a current-limited DC supply so we can read its current-draw behavior, & we watch the shorted rail through a FLIR thermal camera; whatever component is sinking the current heats up & marks itself.

A multimeter in diode mode confirms it pin by pin. A healthy line reads roughly 0.3V to 0.7V of voltage drop to ground, & a reading near 0.0V is a short to ground. The failed capacitor or corroded IC then comes off with an Atten 862 hot air station & gets replaced under a stereo microscope with a Hakko FM-2032.

The data itself is never the thing being repaired. On A7 & later iPhones, every block on that BGA-soldered NAND is ciphertext keyed by the Secure Enclave inside the SoC, so desoldering the chip & reading it returns a dump with no filesystem in it. The board is what failed. We repair it until it boots, you enter your passcode, & the phone decrypts its own data in place while we copy it to external media.

One hard limit exists. If the corrosion destroyed the SoC itself, the keys died with it & the data is gone, & we tell you that during the free evaluation instead of after. Corrosion keeps working while the board sits in a drawer, so the day the phone gets wet is the day to ship it in.

A dead board & a dead SoC are not the same verdict. Corrosion that ate through the inner copper layers can leave the PCB past repair while the silicon sitting on top of it came through fine. The procedure that addresses that case is a CPU swap: the SoC, its paired NAND, & the secure-storage chip come off together & get reballed onto a donor board of the same model.

All three chips travel as a set. The NAND is paired to that specific processor & that specific secure-storage chip, not to the fiberglass underneath them, so lifting the memory chip alone onto a working board leaves a device that cannot boot or decrypt that storage at all. Moving the whole set rebuilds the key chain on the new carrier, which is also why the original chip gets reballed rather than replaced when a NAND failure is the fault instead.

None of that steps around the encryption. The hardware UID stays fused into the original Secure Enclave, & the keys that unwrap your files are derived from it, so they reach the donor board only because the original SoC does. The owner still enters the passcode & the phone decrypts its own data, the same as it would have on the board it shipped with.

We do not offer that board swap at this time, so a liquid case that would need one is not something we can take right now. That line comes up less often than it sounds like it would: corrosion that has shorted components on a rail like PP_VCC_MAIN is repaired on the original board.

It is the narrower case, where corrosion has eaten pads or inner-layer traces that cannot be rebuilt, that would need the transplant. Which one you have is what the free evaluation tells you, & it changes nothing about the limit above: if the liquid crept under the SoC & killed that die, there is no paired set left to move.

iPhone X & newer motherboards are a sandwich: two PCBs soldered together, with liquid free to sit between the layers where nothing is visible from the outside. That density is why the price splits where it does. Pre-X boards are $500, iPhone X & newer are $750, & the guarantee is the same on both: No data, no fee. Free evaluation. No diagnostic charges.

Why Does a Water-Damaged iPhone Charge but Not Show Up on a Computer?

Because the liquid killed the USB data path without touching the main power rail. Charging & data both run through a USB controller IC on the logic board, & corrosion under that chip can sever the data lines while charging keeps working. The battery percentage climbs. iTunes & Finder never see the phone.

That controller is Tristar on boards before the iPhone 8, & Hydra on the iPhone 8 & later. It sits on the charge & data path coming off the charging port, which is one of the routes liquid takes onto the board in the first place. Contaminated water wicks up that path & settles under the IC, where corrosion is enough to take the data line down while the charging function carries on.

Liquid doesn’t have to short a system rail to take a phone off the wire. A PP_VCC_MAIN short is the loud version: the battery sinks to ground & nothing on the phone responds. A corroded USB data IC is the quiet version. The phone boots, the screen lights up, the battery charges, & the one missing function is the USB data connection.

Diode mode is what tells the two apart. Under a stereo microscope we read voltage drop pin by pin on the USB data lines; roughly 0.3V to 0.7V is a healthy line, & a reading near 0.0V is a short to ground. From the customer side the tell is simpler: swapping the cable, the port, & the computer changes nothing, because the fault is not in the accessory. The same IC failure is one of the three roots of Error 14, & that page carries the fuller treatment of the hardware side.

Ultrasonic cleaning still comes first, the same as it does for a shorted rail. Soldering onto pads that still carry corrosion buys a repair that fails later. Then the dead IC comes off with Atten 862 hot air, the pads get cleaned & dressed under the microscope, & the replacement goes down with a Hakko FM-2032 & a Zhuo Mao BGA station. A FLIR thermal camera localizes the short when the corrosion left one behind.

Restoring the data line isn’t the same thing as reaching the data. Once the phone enumerates again it boots, you enter your passcode, & it decrypts its own storage while we copy the files to external media, which is how a successful iPhone board repair here ends. On A7 & later iPhones that NAND holds ciphertext keyed by the Secure Enclave in the original SoC, so that paired set of chips is the only place the decryption can happen.

The passcode stays mandatory through all of it. We repair hardware so the owner can unlock the phone; if the passcode is unknown, the data stays encrypted & the recovery is not possible, & you hear that during the free evaluation instead of after. Activation Lock is a separate iCloud ownership check, not the encryption gate, & board repair doesn’t change it either.

iPhones Do Not Need a Cleanroom

Some data recovery companies advertise “ISO certified cleanroom” facilities for iPhone repair. This is marketing, not a technical requirement.

Cleanrooms exist for hard drive repair because spinning platters have exposed magnetic surfaces that collect dust particles, causing head crashes and permanent data loss. A single fingerprint on a hard drive platter can destroy sectors.

iPhones have no spinning platters, no exposed magnetic surfaces, and no read/write heads that fly nanometers above a disk. iPhone storage is a NAND flash chip soldered to a circuit board. It is a solid-state component sealed in an epoxy package.

Dust particles cannot damage it. The repair environment needs a microscope, an ultrasonic cleaner, a microsoldering station, and good lighting. It does not need laminar airflow or HEPA filtration.

If a company is charging a cleanroom premium for iPhone water damage repair, you are paying for a room that has no relevance to your repair. The work that actually saves your data happens under a microscope with a soldering iron, not inside a cleanroom.