WhatsApp threads turn up in family, employment, contract and housing matters, often in more than one language and sometimes in group chats with a dozen participants. The app’s built-in export makes collection look easy, and in many matters it is a reasonable starting point. But the export has quirks in dates, names, media and length that can quietly distort a thread if nobody checks for them.
This guide covers where WhatsApp data actually lives, how to preserve it, how to export a chat on iPhone and Android, what the export file contains and what it leaves out, review traps specific to WhatsApp, authentication considerations, and production options.
Where does WhatsApp evidence actually live?
Mostly on participants’ devices and in their chat backups. WhatsApp messages are end-to-end encrypted by default, so the provider does not hold readable message content, and the federal Stored Communications Act generally bars providers from disclosing content in response to civil subpoenas anyway.
- The phone. The primary source for each participant’s copy of every chat.
- Chat backups. Typically Google Drive for Android and iCloud for iPhone. Users can choose to end-to-end encrypt these backups, which then require their password or key.
- Linked devices. WhatsApp on a computer or browser may hold synced copies of recent chats.
- Other participants. Each participant received their own copy. For group chats and disputed messages, another participant’s export is valuable corroboration.
Because the content sits with the parties, discovery planning centers on their devices and exports. The guide to producing text messages in discovery covers the broader workflow.
How do you preserve WhatsApp chats?
Act early, and check the disappearing-messages setting first. A chat with a timer on will keep deleting content on schedule while everyone waits for the hold letter.
- Identify chats and participants. List the one-to-one and group chats that matter, with the date ranges.
- Check disappearing messages. WhatsApp lets users set timers per chat or as a default for new chats. Turning the timer off stops future deletions; it does not restore what has already disappeared.
- Note view-once media. Photos and videos sent as view-once are designed not to be saved, so they are generally unavailable after viewing.
- Freeze the device plan. No deleting chats, uninstalling the app, resetting the phone or switching devices without a plan for moving or capturing the data.
- Confirm backup status. Note whether backups exist, when they last ran, and whether they are encrypted.
- Export promptly. Collect an export early as a baseline, even if a more complete collection follows.
How do you export a WhatsApp chat?
Use the Export Chat option inside the chat, choose whether to include media, and send the result straight to a secure location. Menu labels shift between app versions, but the path is broadly the same.
On iPhone
- Open the chat and tap the contact or group name at the top.
- Scroll down and tap Export Chat.
- Choose Attach Media or Without Media.
- Save the resulting file to Files or share it to the firm’s secure upload channel.
On Android
- Open the chat and tap the three-dot menu.
- Tap More, then Export chat.
- Choose Include media or Without media.
- Share the result to a secure destination.
What does a WhatsApp export contain, and what does it leave out?
The export is a plain-text transcript, one message per line with date, time, sender and text, plus media files if you chose to include them. Several things are easy to misread.
| Item | How it appears | Review note |
|---|---|---|
| Sender names | As saved in the exporting phone’s contacts; unsaved contacts appear as numbers | Map every name to a number |
| Dates and times | In the phone’s regional format and local time | Confirm day-month order and time zone |
| Media | Attached files, or a placeholder such as “Media omitted” or “image omitted” | Collect missing media separately if it matters |
| Deleted messages | A deletion notice with no content | Record it; content may exist elsewhere |
| System messages | Participants added or removed, security code changes, timer changes | Relevant to completeness and authentication |
| Long chats | WhatsApp’s help pages have described limits on export length, lower with media | Compare the first exported message to the chat’s known start |
Reactions, edits, polls and similar features may not appear in the transcript, or may appear differently than on screen. Spot-check the export against the phone for any message that matters.
What review problems are specific to WhatsApp?
Date ambiguity, group-chat scope, language and duplicate exports cause most WhatsApp review errors.
Day-month ambiguity
Because export dates follow the phone’s regional settings, 03/04/2025 may mean March 4 or April 3. Confirm the format by finding a date with a day above 12, or by checking the device settings, before anyone builds a timeline.
Group chats
Group chats bring in third parties whose messages may be irrelevant or private, and membership changes over time. Track when each participant joined or left, since a person who joined later did not see earlier messages, and plan redactions or a protective order for nonparty content.
Languages and voice notes
Keep the original language beside any translation, prepared by a qualified translator who can attest to accuracy. Voice notes are audio files; label any transcript as a transcript and keep the audio available.
Duplicates across participants
Exports from several participants overlap heavily. Deduplicate on sender, timestamp and content rather than by file, and keep a record of which sources contained each message. See deduplication and threading for message reviews.
How do you authenticate WhatsApp messages?
The same Rule 901 principles apply as for any message: a participant’s testimony, the account’s tie to a phone number, distinctive content, and corroborating conduct. WhatsApp adds a few useful data points.
- Accounts are registered to phone numbers, so the number in the export ties the account to a line.
- Security-code-change notices can indicate a new phone or reinstall, which may matter if someone claims another person used the account.
- Matching exports from two participants are strong evidence that neither was edited.
- Photos sent through WhatsApp are typically compressed and may lose original metadata; if EXIF data matters, collect the original from the sender’s camera roll.
The guide to authenticating text messages under Rule 901 covers foundation in detail.
How do you request WhatsApp messages from the other side?
Name WhatsApp expressly, define the chats and date range, and specify the form you want. Generic requests for “text messages” invite the response that WhatsApp chats were not covered.
Sample request language (adapt to your matter)
All WhatsApp messages, including messages in group chats, voice notes, images, videos and documents, exchanged between [party] and [name or phone number] from [date] through [date], produced as the complete chat export generated by WhatsApp’s Export Chat function with media included, in the form exported and without alteration, together with the phone number associated with each participant shown in the export.
Pair the request with an interrogatory or deposition questions about disappearing-message settings, backup status, device changes and deleted chats during the relevant period. Those answers often matter as much as the messages, because they explain any gaps. Keep requests proportional under Rule 26(b)(1) by limiting chats, participants and dates to what the issues actually require.
How should WhatsApp evidence be produced?
Most productions use the native export (transcript plus media) with hash values, a paginated PDF log with Bates numbers, or both. Federal Rule of Civil Procedure 34(b)(2)(E) calls for ESI in the form in which it is ordinarily maintained or a reasonably usable form, absent agreement, and a party need not produce the same ESI in more than one form. Settle the form in the ESI protocol where there is one.
- Original export file preserved and hashed
- Date format, time zone and name-to-number mapping documented
- Coverage confirmed against the chat’s known date range
- Media placeholders and deleted-message notices identified
- Nonparty content in group chats reviewed for redaction or protection
- Translations paired line by line with the original
A tool like Message Extractor ingests WhatsApp chat exports, normalizes them with other sources into one thread model with duplicates merged, and generates a chronological, Bates-numbered PDF log with an index; see which export formats it reads. Production form and preservation obligations vary by court, so confirm the approach with a licensed attorney in the jurisdiction where the matter is pending.
