Data Recovery Case File · Mac & Apple Ecosystem · Do Not Take Recovery's Offer
M1 MacBook Only Boots to Recovery Mode
Her enquiry contained a symptom and a complication, and the relationship between them is the case. A 13-inch MacBook Pro with Apple silicon: "it only boots to recovery mode. I thought it was an issue with the on/off button, but resetting it and taking it out didn't solve the issue. Additionally, the technicians at the Apple Store found some water damage — I don't know if it is related to the problem." It is almost certainly related. But the more urgent point is what happens next, because recovery mode is not a neutral place to leave a machine: its most prominent options are to erase the disk and reinstall the system, and on this generation of Mac accepting either would destroy the data permanently and irreversibly. This page explains why reaching recovery at all is genuinely good news, why the water makes time critical, and why the screen she is looking at is the danger.
| Media | 13-inch MacBook Pro with Apple silicon — starts only to recovery mode; water damage identified by the manufacturer's technicians; storage soldered and hardware-encrypted |
| Reported situation | Machine reaches recovery mode but not the installed system · power button investigated and excluded by the owner · liquid damage found during manufacturer assessment · relationship between the two not yet established |
| Fault class | System volume unbootable on a functioning machine with progressing liquid damage — storage integrated and encrypted; no external route to the data |
| Equipment used | No erase or reinstall performed · board assessment with corrosion mapping and findings in writing · extraction with the owner's own credentials while the machine still runs · imaging on first successful access; contents verified and delivered |
The decode: why recovery working matters, the offer to refuse, and the clock
Why reaching recovery mode is good news: on Apple silicon, recovery is not stored on a separate rescue device — it lives on the machine's own internal storage. So a machine that reaches recovery has demonstrated something valuable: it powers, its processor runs, its storage is being read successfully, and the security hardware is functioning enough to start something. That is a long way from dead. What is failing is the installed system volume — either damaged, or unable to complete startup — while everything underneath it works. Her data is very likely intact.
The offer to refuse: and this is the most important paragraph on the page. Recovery mode presents a short menu, and the two most prominent items are Disk Utility — from which the internal storage can be erased — and Reinstall macOS. Both are presented as the natural remedies for a machine that will not start, and both are catastrophic here. On this generation the storage is soldered to the board and encrypted with keys held in the machine's own security hardware. There is no drive to remove, no chip-off route that yields anything but ciphertext, and no way to read the data anywhere except through this machine. Erasing it is final in a way that has no equivalent on older hardware: there is no second copy of the encryption keys and no external path to the platters, because there are no platters. If she erases and reinstalls to "fix" the boot problem, the files are gone for good.
Why the water makes it urgent: the complication is also the clock. Liquid damage does not stop when a device dries — residues continue corroding traces, pads and component legs for as long as they remain, which is why a machine that works partially today may not work at all in a few weeks. On any older Mac that would be inconvenient. Here it is decisive, because the machine is the only route to its own data: if corrosion progresses far enough to stop it running, the data goes with it. The fact that it currently reaches recovery is a window, and windows close.
What extraction actually involves: the machine is assessed at board level with the corrosion mapped and the findings written down, and the data is extracted through the machine itself, using her own credentials to release the encryption — because that is the only mechanism that exists. Where board work is needed to stabilise it long enough to complete that, it is done first. Everything is imaged at the first successful access rather than browsed, because a corroded board is a temporary instrument.
On the bench
Nothing in recovery mode was accepted — no erase, no reinstall, no repair offered by the machine — and the board was assessed before anything else: the liquid's path traced, corrosion documented, and the storage and security hardware inspected specifically, since their condition decides whether a recovery is possible at all. The findings and the urgency went to her in writing. Extraction then ran through the machine itself with her own credentials releasing the encryption, the contents imaged at the first successful access rather than explored, and the files verified by opening before delivery on fresh media. Only afterwards was the machine's own future discussed.
The outcome
The data extracted through the machine with the owner's credentials and verified before delivery, with nothing in recovery mode accepted at any point. Staged assessment, findings in writing, one fixed written figure including VAT; where a drive has to be opened or a chip removed, 50% of parts and labour is payable upfront with the balance only on success — otherwise no recovery, no fee. The decode, for anyone whose modern Mac reaches recovery and no further: that is genuinely encouraging, because recovery lives on the internal storage, so reaching it proves the machine reads its own disk; but the menu in front of you offers to erase and reinstall, and on soldered, encrypted storage there is no external route to your data and no undo — decline both; and if liquid has been found, treat it as a deadline rather than a detail, because the machine is the only key to its own contents and corrosion is still working.
Modern Mac that only reaches recovery mode
Don't touch anything on that screen. Recovery mode's most prominent options are to erase the disk with Disk Utility and to reinstall the system, and on recent Macs the storage is soldered to the board and encrypted with keys held in the machine's own hardware — so there is no drive to remove, no way to read the data anywhere else, and no undo. Erasing to fix a boot problem destroys the files permanently. Take some encouragement from where you are: recovery lives on the internal storage, so reaching it means the machine is powering, reading its own disk and functioning underneath a system volume that won't start. If liquid damage has been found, treat that as urgent rather than incidental — corrosion keeps working after everything feels dry, and because the machine is the only route to its own data, a board that stops running takes the data with it. Get the extraction done while it still starts.
Don't erase or reinstall — call Leeds Data Recovery on 0113 322 3083; corrosion mapped, findings in writing, extraction through the machine with your own credentials while it still runs.
Request a quote online →
Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.