---
title: "Claude Opus 5.5 + REA が、iPhone から「完全に削除した」はずのすべての写真を見つけた。"
url: "https://reamcp.dev/ja/cases/claude-opus-5-5-rea-found-every-photo-i-permanently-deleted--42b42b"
source: "https://x.com/i/status/2114061218352615609"
source_type: "x"
author: "Deni"
author_handle: "0xDeniAi"
stars: 0
category: "セキュリティ・マルウェア解析（防御）"
categories: ["security-defense"]
tags: ["appdata", "claude-code", "iphone-backups", "privacy-audit", "static-analysis", "windows"]
added: "2026-10-25T02:04:44.736Z"
updated: "2026-10-24T18:27:26.000Z"
locale: "ja"
content_locale: "ja"
---

# Claude Opus 5.5 + REA が、iPhone から「完全に削除した」はずのすべての写真を見つけた。

ユーザーが自分の iPhone とノート PC を監査し、Claude Code 経由で REA（Reverse Engineer Anything）を使い、インストール済みの 5 つのプログラムを分解して、どれが隠しフォルダー AppData\MobileSync 内の iPhone バックアップを読んでいるかを確認した後、具体的な強化手順を挙げている。

## Description

この記事は個人的なプライバシー／セキュリティチェックを述べている。暗号化されていない iPhone バックアップが、AppData 配下の隠しフォルダー MobileSync\Backup 内で見つかり、さらに iMessage、WhatsApp、Telegram のチャット内に保持された写真も見つかった。著者はその後 REA（'npx rea-agents setup'）をインストールし、Claude にほとんど使われていない 5 つのプログラム（2 つの「PC クリーナー」、動画変換ソフト、古い VPN、ゲームランチャー）を分析させ、それぞれが実際にディスク上で何を読むのかを調べた。その結果、1 つのクリーナーが MobileSync を含む AppData ツリー全体を走査することが分かった。記事の最後には、修復チェックリスト（古いバックアップを削除する、「Encrypt local backup」を有効にする、未使用のプログラムをアンインストールする、写真ライブラリの権限を制限する、チャット添付を消去する）と、使用した逐語的なプロンプトが示され、著者自身のマシン上での REA の再現可能な防御セキュリティ用途となっている。

## Original README

Claude Opus 5.5 + REA found every photo I "permanently deleted" from my iPhone. they were hidden on my phone and my laptop the whole time.

i plugged my iPhone into my laptop to run a backup and asked Claude Code to do a quick security check while it ran. it came back with something i wasn't looking for at all.

first, the phone. every photo i had ever sent in iMessage, WhatsApp and Telegram was still there, hidden inside the chats. it doesn't show up in your gallery, so you think it's gone. i deleted those photos from my camera roll years ago. the copies in the conversations never went anywhere, and some of my chats go back to 2020.

then the laptop. a hidden folder inside AppData called MobileSync\Backup. Windows hides AppData by default, so i had never seen it. inside were five old iPhone backups, the oldest from 2021, none of them encrypted. each one is a full copy of my camera roll on the day i made it. so every photo i deleted after that day was still sitting there, sorted by date.

here's what Claude pulled out:

a photo of my passport from a 2023 visa application
screenshots of my bank app with the full account number visible
private photos i sent someone and deleted right after the breakup
a screenshot of my crypto seed phrase i took "just for a minute" in 2022
a photo of my ID and card that i took to remember the numbers and deleted 5 seconds later
screenshots of my ex's private stories i saved in 2023

183,406 files in total, a lot of them full resolution.

then i asked it to keep going. in about 4 minutes it gave me a full report: every backup with its date, size and how many photos and videos were inside, which ones were unencrypted, and a list of every program on my laptop i hadn't opened in over 6 months.

that list was the scary part. just because you can't see a folder doesn't mean programs can't. any program running on the laptop can open an unencrypted backup, and i had two "PC cleaners", a free video converter, an old VPN and a game launcher i don't remember installing.

so i plugged REA (Reverse Engineer Anything) into Claude Code and had it take those 5 programs apart. it showed me what each one actually reads on disk. one of the "PC cleaners" walks through the whole AppData folder on every launch, MobileSync included. that means it had access to every one of those backups for 2 years.

and on the phone, 23 apps had Full Access to my photo library, meaning every photo, not just the ones i choose. weather apps, a QR scanner, a flashlight app from 2022.

what i did, about 5 minutes total:

1. open iTunes or the Apple Devices app → your iPhone → Manage Backups → delete the old ones
2. tick "Encrypt local backup" so the next one is locked with a password
3. uninstall everything on Claude's "not opened in 6 months" list, starting with anything REA caught reading AppData
4. iPhone: Settings → Privacy & Security → Photos → move apps from Full Access to Limited or None
5. iPhone: Settings → General → iPhone Storage → Messages → Review Large Attachments, and clear the photos you don't want kept
6. go through old chats in WhatsApp and Telegram too, their media stays even after you delete it from the gallery

here's how to run the same check yourself.

for Claude Code:

"find every iPhone backup on this computer, including hidden folders like AppData. for each one tell me the date, the size, how many photos and videos are inside, and whether it's encrypted. then list every installed program i haven't opened in the last 6 months. don't delete or change anything, just give me the report."

for REA, install it with npx rea-agents setup, then ask Claude:

"use REA to analyze every program on that list. tell me which ones read files inside AppData, and whether any of them touch the MobileSync folder."

i went from 23 apps with full access to my photos to 3. send this to anyone who's ever plugged their iPhone into a laptop.