Cloud storage explained: sync, backup and sharing

Updated: Oct 28, 2026

Cloud storage is one of the most widely used and least understood services on the internet. Dropbox, Google Drive, OneDrive and iCloud each do at least three different things: they synchronise files between devices, they can back up data, and they let you share files with other people. The three overlap in the interface but behave very differently when something goes wrong. Knowing which one you are relying on at any moment prevents the two classic disasters: losing files you thought were safe, and exposing files you thought were private.

Sync, backup and sharing are different jobs

Sync keeps a folder identical across devices. A client program watches a folder on your computer; when a file changes, the change is uploaded to the provider’s servers and pushed to every other device signed in to the same account. The defining property of sync is that it mirrors everything, including deletions and corruption. Delete a file on your laptop and it disappears from your phone and the web interface within seconds. Most providers keep deleted files and older versions for a limited time, typically 30 days on free plans, longer on paid ones, which is the only thing standing between a mistaken deletion and permanent loss.

Backup copies files from a device to storage without mirroring in the other direction. A proper backup keeps multiple versions and does not delete the copy when the original is deleted, or at least not for a long retention period. Some cloud storage services offer a distinct backup feature for computers or phones; others leave backup to third-party tools that use the storage as a destination.

Sharing makes a file or folder available to other people, either by inviting specific accounts or by creating a link. A link that “anyone can open” is effectively public: it can be forwarded, indexed if posted somewhere, and it does not expire unless you set it to.

Where sync alone fails

• Ransomware. Malware encrypts your files; the client uploads the encrypted versions; every device receives them. Recovery depends entirely on version history reaching back far enough.
• Accidental bulk deletion. Removing a folder to free space on one device removes it everywhere. If you only notice after the retention period, it is gone.
• Selective sync confusion. Folders marked “online only” exist solely on the provider’s servers. If the account is closed or compromised, there is no local copy.
• Account loss. A locked, hacked or suspended account takes every synced file with it. Providers are not obliged to restore access quickly.
• Conflicts. Editing the same file on two devices while offline produces duplicate “conflicted copy” files and, sometimes, silent loss of one set of changes.

None of these are flaws in sync; they are consequences of what sync is for. The mistake is treating a mirror as an archive.

Sharing risks

The most common privacy incident with cloud storage is not a breach at the provider but a link shared more widely than intended. A folder link sent to a colleague can be forwarded to a client; a “view” link pasted into a public document is indexed by search engines; a shared folder that was never cleaned up still gives a former contractor access years later. Providers offer expiry dates, passwords, download restrictions and access logs for links, but only if you use them.

Setting up cloud storage so files stay safe

• Use sync for convenience and add an independent backup for anything you cannot recreate. A local external drive or a second provider counts; the same provider’s “backup” feature is better than nothing but shares the account risk.
• Check your plan’s version history and deleted-file retention, and know how to use it before you need it.
• Keep at least one device with a complete local copy rather than “online only” for important folders.
• Enable two-factor authentication on the storage account; it holds more of your life than most accounts.
• Share with specific people rather than public links when possible. When a link is necessary, set an expiry and remove it afterwards.
• Review “shared with me” and “shared by me” lists every few months.
• Encrypt highly sensitive files before uploading, or use a provider with end-to-end encryption, if the provider being able to read them is a concern.

Frequently asked questions

Is my data safe at the provider?

Major providers store data redundantly across multiple locations and rarely lose it. The realistic risks are on your side: account compromise, deletions and sync mirroring problems.

Can the provider see my files?

With standard services, yes; files are encrypted in transit and at rest, but the provider holds the keys, which is what allows web previews, search and sharing. End-to-end encrypted services trade some of those features for provider-blindness.

What happens if I stop paying?

Typically the account becomes read-only until you fall below the free quota, and after a grace period files may be deleted. Export before downgrading.

Sync keeps devices identical, backup keeps history, sharing extends access; only the second protects you from your own mistakes.

In short: Cloud storage bundles synchronisation, backup and sharing into one product, but only genuine backup with version history protects against deletion and ransomware. Treat sync as convenience, protect the account carefully, and share deliberately with expiry dates and periodic reviews.