Digital Forensics for Family Law and Divorce Attorneys Skip to main content
Family Law · Divorce · Custody Evidence

Digital Forensics for Family Law and Divorce Cases

Text messages, photos, app data, and location history decide custody and divorce disputes more often than any witness. The Waldrep Company provides digital forensics for family law attorneys nationwide: defensible extraction, recovery, and authentication of the evidence your case turns on.

Family law cases run on digital evidence. A parenting dispute turns on a text thread. A dissipation claim turns on payment app records. A relocation fight turns on location history nobody realized the phone was keeping. Digital forensics in a divorce case means getting that evidence off the device correctly, so it holds up in court.

Eric Waldrep brings 19 years of digital forensics experience and 27 years in law enforcement, with casework in federal and state courts. The file you receive is built for litigation: what was found, where it lives, and how it was preserved.

Extractions run on Cellebrite UFED, GrayKey, and Magnet AXIOM, with every acquisition hash-verified to show the examined copy matches the original. The full process is described under mobile device forensics. Based in Addison, Alabama; working with attorneys nationwide through remote intake, shipped devices, and travel for testimony.

How engagements start

The attorney is the client. Call (251) 216-1164 or use the contact page; the first consultation is free. You get a written scope, a per-device quote, and a shipping plan for the device.

  • Text messages and iMessage threads, including recoverable deleted content
  • WhatsApp, Signal, Facebook Messenger, Snapchat, and dating app chats
  • Photos and videos with metadata: when taken, what device, often where
  • Location artifacts: GPS history, significant locations, and routes
  • Payment app records for dissipation and hidden-income claims
  • Call logs, browser history, and app usage patterns
  • Spyware and stalkerware detection on a client's own device
  • Hash-verified acquisition with chain-of-custody documentation
  • Expert reports, declarations, and testimony
19
Years in Digital Forensics
27
Years in Law Enforcement
Fed + State
Courts Qualified
MCFE
Magnet Certified Forensics Examiner

What We Recover, Authenticate, and Explain

A handful of evidence types decides most family matters. Each has to be collected so it survives a challenge.

Text Message Recovery & Authentication

Native extraction of iMessage, SMS, and chat threads with stored timestamps, participant data, and hash verification, including deleted messages where artifacts remain.

Photos, Videos & Metadata

A photo's metadata can show when it was taken, on what device, and often where: a disputed image becomes evidence an examiner can explain under oath.

Location & Movement Artifacts

GPS history, significant-location records, and app location data bearing on custody schedules, relocation disputes, and where a parent actually was.

App, Cloud & Payment App Data

WhatsApp, Signal, Snapchat, dating apps, payment apps. App data often survives where texts do not, and payment records matter in dissipation claims.

Spyware & Stalkerware Detection

A client's own device examined for monitoring software, mirroring apps, and unauthorized account access, with documented findings.

Expert Reports & Testimony

Written for the courtroom, not the lab, and backed by deposition and trial testimony. See the expert witness service.

Why Screenshots Get Challenged

A screenshot is a picture of a screen. It carries no underlying message records, no stored timestamps beyond what is drawn in the image, and no way to show the conversation was not edited, cropped, or staged with a renamed contact. Opposing counsel knows this, which is why screenshots draw objections.

A forensic extraction is different. The messages come out of the device's own databases with stored timestamps, participant identifiers, and delivery records, and the acquisition is hash-verified so the examined copy can be shown to match the source. That gives counsel a foundation for authenticating text messages that a camera-roll image cannot provide, and it captures what a screenshot never will: the deleted thread sitting next to the ones that were kept.

None of this is legal advice, and no examiner can promise a court will admit an exhibit. A proper acquisition gives you a witness who can explain where the evidence came from and how it was preserved.

The full process is under data recovery and authentication, and our article on deleted text messages in court covers what recovery can and cannot do.

Spyware and Stalkerware Checks

Some clients arrive with a specific fear: the ex knows too much. Sometimes that is coincidence. Sometimes there is monitoring software on the client's phone. The examination is of the client's own device, so it is simple to authorize. It looks for commercial stalkerware, mirroring apps tied to someone else's account, unauthorized cloud access, and settings that quietly share location.

One caution: do not wipe the phone. If monitoring software is present, it is evidence, and deleting apps or factory-resetting destroys the proof. Sudden removal can also alert the person doing the monitoring.

Preserve first, examine second, then decide next steps with counsel.

Whose Phone Can Be Examined

The line is simple and it does not move. We examine devices the client owns, and devices counsel obtains through consent or legal process: agreement of the parties, discovery, or court order.

We do not covertly access another person's phone. Requests to pull data from a spouse's device without their knowledge, bypass the passcode on a phone the client does not own, or install monitoring software are declined, every time. Covert access can create criminal exposure, and evidence gathered that way tends to hurt the case it was meant to help.

If the other party's device matters, there is a lawful path to it, and it runs through you.

The retaining attorney is the client throughout: scope, findings, and communication all run through counsel. Individuals are welcome to call, and the first step is nearly always the same: talk to your attorney, then bring the examiner in together.

Straightforward Pricing for Family Law Cases

Two numbers cover most engagements. A written fee agreement comes first, and the initial consultation is free.

Analysis, Consulting & Review
Examination, Reporting & Case Support
from $425 / hour

  • Message recovery and authentication analysis
  • Spyware and stalkerware examination
  • Timeline, photo metadata, and location artifact analysis
  • Declarations and expert reports written for the court
  • Consultation on what the artifacts do and do not support

Scope agreed with counsel in writing first. The full fee schedule, including testimony, is on the rates page.

Flat Fee
Opposing Expert Report Review
$2,750 flat

  • Independent read of the other side's forensic report or extraction
  • Tested against Rule 702(d), which since December 1, 2023 requires its proponent to show the method was reliably applied to the facts of your case
  • Written critique keyed to page and paragraph
  • Deposition questions drafted to go with it
  • Five to seven business days
  • See what the review examines

Frequently Asked Questions

The questions family law attorneys ask most.

Often, yes. Deleted messages can persist in a device's databases long after they leave the screen, and recent iPhones keep recently deleted messages recoverable for a time. Recovery depends on the device, the operating system, time elapsed, and overwriting. No honest examiner promises recovery before examining the device. For background to share with clients, read our article on deleted text messages in court.
Yes, and it is one of the most common family law requests we see. It examines the client's own device, so authorization is straightforward. We look for commercial stalkerware, mirroring apps tied to someone else's account, unauthorized cloud access, and location sharing the client did not set up. Advise the client not to delete apps or reset the phone first: if monitoring software is present, it is evidence.
Only with lawful authority, and that runs through your attorney. A device obtained by consent, by agreement, or through discovery or court order can be examined under a protocol both sides accept. We do not access another person's phone covertly. Requests to secretly extract data from a spouse's device are declined: covert access can create criminal exposure and rarely produces evidence a court will consider.
Every device is logged at intake with identifying details, condition, and who delivered or shipped it. Acquisitions are hash-verified, so the working copy can be shown to match the original. Devices sit in controlled storage between sessions, every transfer is documented, and the chain-of-custody record accompanies the report.
Forensic acquisition is $1,500 per device, a flat rate covering hash-verified extraction and preservation with chain-of-custody documentation. Analysis, consulting, and review bill from $425 per hour, with scope agreed in writing first. The initial consultation is free, and the full fee schedule is on the rates page.
Acquisition usually takes a few business days from device receipt, and the phone often goes back to the client quickly. Analysis depends on scope: a focused question moves faster than a full review. If a hearing date is driving the schedule, say so in the first call.

Have a Family Law Case With Digital Evidence?

Call or write for a free consultation. Describe the case in general terms and get a straight answer on what an examination can and cannot establish, plus a written quote.

Free initial consultation · The attorney is the client · Devices shipped nationwide

Request a Family Law Consultation

Tell us what the matter involves and we will respond personally. Initial consultations are free, and nothing you send here is a retention.

Sending this does not create an attorney-client or expert relationship, and please do not send privileged material or case evidence through this form. Prefer the phone? Call (251) 216-1164.