Information technology has now brought human life into more advanced. The positive impact that occurs as a result of information from all sides of the world is getting faster. At this time, the memory on a smartphone is still a mainstay for storing files, be it important files such as jobs and levers or just want ordinary files. File or data is the most important thing that becomes an information system. The files that are on the smartphone will be deleted. The development of smartphones from year to year is increasingly rising. The purpose of this research is to learn the techniques of data recovery and the damage done or lost data both system and intentional damage. The research method uses the mobile forensic method created by the National Institute of Standards and Technology (NIST), namely by discussing problems, asking for solutions, testing solutions, evaluating and completing procedures by reporting results.