iCloud, OneDrive, and Google Drive are not backups — the 3-2-1 rule in plain English

“I don't need backups, everything's in iCloud.” We hear it every week — usually right after something got deleted.

Sync vs. backup

Sync services (iCloud Drive, OneDrive, Google Drive, Dropbox) keep your files the same everywhere. Edit a document on your laptop and it updates on your phone. That's the point.

It's also the problem:

• Delete a folder → it's deleted everywhere.
• Ransomware encrypts your files → the encrypted versions sync up and replace the good ones.
• Someone gets into your account → they can delete everything, everywhere.

Most sync services have a recycle bin and some version history, often around 30 days. That can save you — if you notice in time, if the feature is on, and if you're willing to restore thousands of files one by one. That's a safety net, not a backup.

A backup is different

A real backup is:

• Separate — a copy your everyday mistakes can't reach.
• Versioned — it keeps older copies, so you can go back to last Tuesday.
• Automatic — it runs without anyone remembering.
• Tested — you've restored from it at least once.

The 3-2-1 rule

• 3 copies of anything you can't lose: the original plus two backups.
• 2 different types of storage, so one failure can't take both.
• 1 copy offsite, out of reach of floods, fires, burglars, and ransomware on your network.

What that looks like in real life

At home (Mac or PC):

1. Keep using iCloud / OneDrive / Google Photos for convenience.
2. Add a local backup: Time Machine on Mac or File History on Windows, to an external drive. (Ransomware can reach a drive that's always plugged in, so this isn't your only copy.)
3. Add an automatic offsite backup service that keeps versions.

In an office:

1. Shared files in Microsoft 365 or Google Workspace — plus a separate backup of those accounts.
2. Local machines and any server backed up nightly with versions.
3. An offsite, immutable copy that ransomware can't delete.
4. A test restore on the calendar every quarter.

The step everyone skips

Test the restore. Pick a file, delete it, get it back. If you can't, you don't have a backup — you have a hope.

See it play out

Our Crash Test runs ransomware, floods, theft, and accidental deletes against your real setup — and shows the same night with a 3-2-1 backup. It takes two minutes.

When to call a tech

We set up 3-2-1 backups for homes and offices, test the restore, and monitor them so you find out about a failed backup from us — not from a disaster.