What Apple’s Data and Privacy Export Actually Contains — and Why It Isn’t a Backup

You request the export, wait for the notification, download the archive, and open it expecting your working state. What you get is a folder of .vcf cards, .ics calendars, .eml files, JSON spreadsheets, and original-format media — readable, but not restorable. That gap is the whole story. Apple’s Data and Privacy export answers a different question than a backup does, and for a shop running three to twenty Apple devices, confusing the two leaves you with a compliance artifact where you needed a recovery plan.

Here is the distinction stated plainly: the export tells you what Apple holds about your account. A backup tells you how to get your working state back. They are not interchangeable, and Apple’s own documentation treats them as separate features with separate purposes.

What the request actually covers

Apple’s support article on getting a copy of your account data lists the requestable categories. The list is explicitly non-exhaustive — Apple says the information “includes, but is not limited to” the following:

• Apple Account details, including associated Apple TV profiles and sign-in records
• Data stored in iCloud: contacts, calendars, notes, bookmarks, reminders, email, photos, videos, and documents
• App usage information related to iCloud, Apple Music, Game Center, and other services
• A record of purchases and downloads from the App Store, iTunes Store, and Apple Books, plus store browsing history
• Apple Store and support transaction records
• Marketing communications, preferences, and other activity records

That is an account-level disclosure. It is not a device snapshot, and it is not a sync mirror. The framing matters because the categories Apple lists are broad enough that operators assume completeness — and the exclusions below show why that assumption fails.

The request mechanics that affect scheduling

The workflow is documented on Apple’s Data and Privacy page. Sign in with your Apple Account, select “Request a copy of your data,” choose the categories you want, and select Continue. Apple verifies that you are the account holder, organizes the data into readable formats, posts it to the Data and Privacy page, and notifies you when it is available.

The detail that matters most for a multi-device operator is the download window: you have 14 days to download your data, after which it is removed from that location and you must request it again. That single constraint turns the export from a one-time click into a scheduled task with an owner and a calendar reminder. If you are managing exports for an owner account, a staff account, and a shared-device account, you have three separate requests, three separate notifications, and three separate 14-day windows to track.

Each Apple Account is a unique account. Apple states plainly that if you want a copy of data from more than one account, you must sign in to each account individually and submit a request for each. A shop with multiple Apple Accounts — owner, staff, shared devices — should inventory those accounts before requesting, or it will miss data.

Access to the feature also varies by country and region. If the option is not visible on your Data and Privacy page, the feature is not available where you are signed in.

Decoding the formats

Apple delivers the export in a mix of original formats and industry-standard formats. The support article specifies:

• Photos, videos, and documents: original formats
• Contacts, calendars, bookmarks, and emails: formats such as .vcf, .ics, .html, and .eml
• App usage information: spreadsheets or files in .json, .csv, or .pdf formats

Apple also provides PDF file guides describing the types of data associated with your account. But those guides are only available for files created by apps and services — not for content you created or that was shared with you, such as emails, notes, calendar events, reminders, photos, videos, or documents stored in iCloud. That is a documentation gap worth naming without cynicism: the guides help you interpret Apple’s own records, not your content.

Two practical notes from Apple’s own guidance. First, use a Mac or Windows PC to download and view the files; the default applications on either platform — TextEdit on Mac, Notepad on Windows — can open the text-based formats. Second, some spreadsheet apps automatically round certain large numbers, such as account numbers, and display them incorrectly. Apple recommends Numbers where possible. If you are reconciling purchase records or account identifiers, that rounding behavior can silently corrupt your audit trail.

What is deliberately not in the export

The exclusions are the reason the export cannot function as a backup. Apple documents them clearly:

Purchased content. The export includes a list of items purchased or downloaded from the App Store, iTunes Store, and Apple Books — but not the actual content. Apple states that purchased content is not personal data and is not provided as part of the data set. You can re-download apps, music, films, TV programmes, and books from their respective stores, but the export itself does not contain them.

Messages content. Apple states that messages are encrypted on the device and cannot be accessed by anyone without the device passcode. Messages content is not visible in the data request. For a business that conducts client conversations over iMessage, that is a material gap.

Masked identifiers. Apple masks certain information in the data it provides — including credit card or bank details, device identifiers, and email addresses — for security and fraud protection. If you need those details, you sign in to your account or contact your bank or financial service provider. A masked export is not a complete record of the business’s data.

There is also a structural exclusion worth understanding: third-party app data may use your iCloud storage even if you cannot see the details. Apple’s archive article directs users to contact the app developer for help with third-party data stored on iCloud. The export is not a reliable path to third-party app containers.

Why it is not a backup

Put the pieces together and the conclusion is unavoidable. The export has no restore path — Apple describes it as a copy of data, not a restore mechanism. It expires after 14 days. It masks identifiers. It excludes purchased content and Messages content. It is account-scoped rather than device-scoped, so one request covers one Apple Account, not one device or one fleet.

Apple’s own documentation reinforces the separation. The company maintains a distinct support article on archiving or making copies of iCloud-stored information, framed as keeping an extra copy so that accidentally deleted contacts, email, or documents can be restored from iCloud or from another copy. That article covers iCloud Drive files, photos and videos, Mail, Safari bookmarks, contacts, calendars, reminders, notes, Voice Memos, and FaceTime video messages — the per-app archive routine that actually serves recovery.

And device backup is a third, separate mechanism. Apple states that iCloud backs up an iPhone or iPad automatically each day when it is connected to a power source and Wi-Fi and the device screen is locked. That is the device-level recovery artifact. The export is neither of these things.

The complementary archive routine Apple documents

If the export is the audit and portability tool, Apple’s archive article is the recovery-oriented companion. The documented steps, with the version-specific details that matter:

iCloud Drive. Copy files from a Mac, iPhone, iPad, or iCloud.com. One caveat Apple states explicitly: if you copy a file from a shared folder in iCloud Drive to another folder, it does not copy sharing access. For a studio with a shared client folder, that means the archive preserves the files but not the collaboration structure.

Photos and videos. On iPhone or iPad, connect external storage, go to Settings > [your name] > iCloud > Photos, tap iPhone Storage, and choose Download and Keep Originals. Then in Photos, select items, tap Share, and choose Export Unmodified Original. On Mac, select items in Photos and choose File > Export. Note that photos copied from a Shared Album may not save at full resolution, and comments or likes are not saved.

Contacts. Export vCards from Contacts on Mac (File > Export > Export vCard) or from iCloud.com. Apple notes that the vCard method copies contacts but not lists, and recommends archiving the entire Contacts database as well. Archives are more complex, and Apple warns that you might not be able to restore data using Archives while connected to the Internet and signed in to iCloud.

Calendars. Export from Calendar on Mac (select the calendar, File > Export) or download an ICS file from iCloud.com via the public-sharing workaround Apple documents. One retention detail worth knowing: Apple states that iCloud Calendar keeps information from the last six months and up to three years in the future.

Notes. In macOS Sequoia or earlier, open the note and choose File > Export as PDF. In macOS Tahoe or later, Apple documents File > Export To or Export as, with PDF or Markdown options.

Safari bookmarks. On Mac, choose File > Export Browsing Data to File, select the data, and click Export. In macOS Sequoia or earlier, the button reads Download.

Voice Memos and FaceTime video messages. Duplicate or share recordings from the Voice Memos app; save FaceTime video messages from the call history in iOS or iPadOS 17 or later.

A practical operating checklist for a small fleet

This is a recommendation, not a finding from Apple’s documentation. The steps below follow from the constraints above:

1. Inventory your Apple Accounts first. Each account requires its own request. List owner, staff, and shared-device accounts before you start, or you will miss data.
2. Assign an owner and calendar the 14-day window. The notification arrives, and the clock starts. Put the download on a calendar with a named owner, not in an inbox.
3. Store exports off the requesting machine. The export contains account records and masked identifiers. Treat it as sensitive: encrypt at rest, restrict access, and set a retention period rather than leaving it in a Downloads folder.
4. Pair the export with per-app archives and device backups. Use the export for portability, audit, and account-level record review. Use the archive routine and iCloud Backup for recovery. Do not substitute one for the other.
5. Reconcile the format mix into your actual tools. The .vcf, .ics, .eml, .json, and .csv files are readable but not directly restorable. Import them into the contact manager, calendar client, or mail archive the business actually uses, or they remain inert.

One more consideration: encryption posture

The export’s contents are shaped by your account’s encryption setting. With standard data protection — the default — iCloud data is encrypted in transit and stored encrypted at rest, with encryption keys secured in Apple data centers so Apple can decrypt data on your behalf when you sign in on a new device, restore from a backup, or recover after a forgotten password. With Advanced Data Protection, the number of data categories using end-to-end encryption rises to 25 and includes iCloud Backup, Photos, Notes, and more.

This matters for the export in two ways. First, end-to-end encrypted categories are the ones Apple cannot decrypt — which is why Messages content is excluded and why some data may not appear in identifiable form. Second, when Advanced Data Protection is enabled, access to data via iCloud.com is disabled by default, with an option to turn on web data access. If your team relies on iCloud.com for downloads, that setting affects your workflow. The export is not a substitute for Advanced Data Protection, and it does not change encryption behavior.

The decision rule

Use the Data and Privacy export for portability, audit, and account-level record review. Use per-app archives and device backups for recovery. The export is a scheduled, expiring, masked, account-scoped disclosure — valuable for what it is, dangerous when mistaken for what it is not. For a shop running three to twenty Apple devices, the operational discipline is to run both tracks, name an owner for each, and never let the 14-day window close on an export you meant to keep.

FAQ

Can I restore a device from the Data and Privacy export?
No. Apple describes the export as a copy of data associated with your account, not a restore mechanism. Device recovery comes from iCloud Backup or a computer backup; per-app recovery comes from the archive routine Apple documents separately.

Why can’t I see my Messages in the export?
Apple states that messages are encrypted on the device and cannot be accessed by anyone without the device passcode. Messages content is not visible in the data request.

Does the export include my purchased apps, music, and books?
It includes a list of items purchased or downloaded, but not the content itself. Apple states that purchased content is not personal data and is not provided as part of the data set. You can re-download from the respective stores.

What happens after the 14-day window?
The data is removed from the Data and Privacy page, and you must request it again. There is no documented extension.

Can I request data for multiple Apple Accounts in one go?
No. Each Apple Account is a unique account. Sign in to each account individually and submit a request for each.

Why are some fields masked?
Apple masks credit card or bank details, device identifiers, and email addresses for security and fraud protection. If you need those details, sign in to your account or contact your bank or financial service provider.

Is the export available in every country?
No. Apple states that access to the feature varies by country and region. If the option is not visible on your Data and Privacy page, it is not available where you are signed in.