A 53-year-old tech exec is taking Apple to court—and he’s not just after his iPhone photos. Michael Mathews has filed a lawsuit demanding access to over 2TB of data that vanished after his iPhone was stolen, along with at least $5 million in damages. But this isn’t just about one man’s digital life going up in smoke. It’s a larger debate about whether Apple’s airtight security is protecting users—or leaving them stranded.
The case of the missing iPhone—and the lost digital life
It all started when Mathews fell victim to pickpockets in Scottsdale, Arizona. His iPhone was swiped, and soon after, the thief allegedly changed his Apple ID password and set up a new Recovery Key—a 28-digit passcode that Apple introduced as part of its Advanced Data Protection (ADP) system. This code is the only way to regain access to an Apple account if the password is lost or changed.
That’s where things spiralled. Mathews couldn’t recover his data—not even with “unquestionable evidence” that the account was his, according to the lawsuit. And since Apple doesn’t store Recovery Keys, even they can’t unlock the account. What’s gone is gone.
The result? According to Mathews, his photos, music, tax documents, and critical work files vanished. His tech consulting firm had to shut down, and he’s now suing Apple in federal court in California.
A privacy feature or a brick wall?
The lawsuit raises a real question: should privacy and security be so rigid that even the rightful owner can’t get their data back? Mathews’ attorney says no.
“What’s indefensible is Apple holding on to data that they don’t own,” said K. Jon Breyer, speaking to The Washington Post. “Under what basis do you get to keep your users’ data and not return it?”
Apple, for its part, says it takes attacks seriously and sympathises with victims—but hasn’t commented on this specific case. Their whole argument hinges on privacy: the Recovery Key is user-controlled for a reason. Once it’s gone, even Apple can’t peek inside your digital vault.
So who’s right?
Security advocates might argue Apple is staying true to its privacy-first promise. But for users like Mathews, the system feels broken—offering no lifeline even in extreme situations. With the case now entering the discovery phase, it could set a precedent for how Big Tech balances privacy with accountability.
And if you’re wondering—yes, Recovery Key management just became your next big adulting task.
