Cloud Storage Compared: What Tech Reviewers Miss in Their Breakdowns

The right cloud storage service depends on ecosystem, encryption model, and exit cost more than price per terabyte.

Google Drive suits Android and Workspace users, iCloud+ suits Apple households, OneDrive suits Microsoft 365 subscribers, Dropbox suits sync-heavy teams, and zero-knowledge services such as Proton Drive and Sync.com suit confidential files.

Most comparison articles open with a grid: free gigabytes, the price of two terabytes, a column of checkmarks. The grids are accurate enough and nearly useless for the decision that matters. Two terabytes at Google, Apple, and Dropbox lands in a band of roughly $10 to $12 a month, depending on billing term, so price rarely separates the contenders.

Behaviour under stress does: a stolen laptop, ransomware encrypting a synced folder, a locked account, a government demand, a lapsed subscription. Reviewers rarely test those moments, because a two-week trial cannot simulate them. The analysis below covers them and closes with a four-part framework for making the choice.

The Bundle Is the Real Product

Storage is rarely sold on its own anymore. Paid OneDrive capacity is bought through a Microsoft 365 subscription rather than as a storage-only product, which turns the price comparison into a question about what else is in the box.

A household that already needs Word and Excel gets a terabyte per person at almost no marginal cost. A household that does not pays for an office suite to rent disk space.

The same logic applies to Google, where the “free tier” is a shared pool. Google’s free 15 GB is split across Gmail, Drive, and Photos, so a phone’s camera roll and a decade of email compete for the same space.

Timing matters too. Microsoft 365 pricing was slated to rise in July 2026, and Microsoft confirmed early in 2026 that it is discontinuing standalone OneDrive for Business plans. Annual billing locks a rate, but it also commits a buyer to a product whose terms can change. The more useful metric is effective cost per terabyte-year after subtracting any software that would have been purchased anyway.

Sync Is Not Backup

Sync services replicate state. Delete a folder on one device, and the deletion reaches every other device within minutes.

A file corrupted by failing storage or encrypted by ransomware propagates the same way. Recycle bins and version histories soften the blow, but retention windows differ by provider and plan, and they seldom appear in a comparison grid. Some providers build in mitigation: OneDrive advertises ransomware detection with file recovery. Recovery features are a safety net, not a second copy.

Dedicated backup products answer a different question. Backblaze and IDrive are built to keep independent, versioned copies of a machine, and reviewers who draw the distinction tend to describe IDrive as true backup rather than just sync. The long-standing 3-2-1 guideline, three copies on two kinds of media with one offsite, still describes the minimum. A synced folder counts as one copy, not three.

Encryption Claims Need Close Reading

Every major provider encrypts data in transit and at rest. The phrase carries little weight on its own, because the provider typically holds the keys and can read, scan, or hand over the files under legal compulsion. Three distinct models sit behind the marketing.

The first is provider-managed encryption, the default at most large services. The second is selective end-to-end encryption, which Apple’s iCloud illustrates: 15 data categories, including Health data and Keychain passwords, are end-to-end encrypted by default, and Advanced Data Protection raises the count to 25, adding backups and photos.

The third is zero-knowledge by default, which one 2026 comparison attributes to Proton Drive, Tresorit, Internxt, MEGA, and Sync.com. The notable exception is pCloud, where zero-knowledge protection covers only a dedicated Crypto folder, a detail easy to miss on a pricing page.

Availability of these protections also depends on where the user lives. Apple pulled Advanced Data Protection from the United Kingdom in February 2025 after a fight with the British government over law enforcement access, and UK users who had not already enabled it lost the option to do so.

Reporting from August 2026 indicates the feature has been unavailable to new UK users for eighteen months, with the underlying legal question still undecided. The lesson extends beyond Apple: a security feature listed on a pricing page is a product of local law as much as engineering.

Zero-knowledge carries costs that reviewers understate. Because keys derive from account credentials, providers such as Proton cannot help a user recover files after losing access.

Server-side previews, search, and collaborative editing are limited or absent, and reviews have reported slower transfer speeds than mainstream rivals. Metadata protection is also partial: contents are shielded, while file counts, sizes, and access timing typically remain visible to the provider.

Account Risk Is Storage Risk

A cloud drive is only as durable as the account behind it. Google’s policy is the clearest example: personal accounts unused for at least two years may be deleted, along with Drive files and Photos content.

Organization-managed accounts are exempt, and accounts tied to ongoing paid subscriptions are also excluded. Content can also be removed from accounts that remain over their storage limit for two years. Policies of this kind rarely surface in comparisons, yet they matter most to the person who uploads an archive, stops opening the account, and assumes it will sit untouched forever.

Account lockouts carry a related hazard. Email, photos, documents, and two-factor codes often hang from a single login, so a suspension or a failed recovery can strand everything at once. A recovery contact, a stored recovery code, and one offline copy of critical files reduce that exposure more than any feature gap between providers.

Sync Engines Show Their Differences at Scale

Trials use a handful of documents. Real workloads involve tens of thousands of small files: photo libraries with sidecar files, code repositories, site backups, accounting archives. Sync clients diverge sharply under that load, in indexing time, CPU use, conflict handling, and tolerance for long paths and unusual characters.

Dropbox holds a reputation for the most dependable engine, and comparisons of the big three credit it with the most reliable sync client while noting it offers the smallest free tier. That reliability is the main argument for paying its prices. Selective sync and on-demand files determine how much local disk a large library consumes, and providers implement both differently. The practical test is to point a trial account at the single messiest folder in the user’s possession and watch for duplicated conflict copies, stalled uploads, and renamed files.

The Four-L Test

A simple framework covers the failure modes above. Four questions, each beginning with L, turn a feature grid into a decision.

Lock-in

Lock-in measures the cost of leaving. Bulk export speed, dependence on proprietary formats (native Google Docs and Sheets convert on export), and ecosystem ties such as photo libraries and shared family plans all count. The test is to export a representative gigabyte before committing and inspect what arrives.

Leakage

Leakage asks who can read the contents and under whose law. Provider-managed encryption is adequate for ordinary documents. Contracts, medical records, source documents, and client data justify end-to-end or zero-knowledge storage.

Loss

Loss asks how many independent recovery paths exist. Version history, trash retention, and ransomware rollback together count as one path; a separate backup counts as another. A single path is a risk.

Lapse

Lapse asks what happens when payment stops, a card expires, or the account goes quiet. Grace periods, read-only modes, and inactivity deletion rules differ by provider. Buyers outside the United States should also confirm regional pricing, since a declined foreign-currency card payment is an easy way to trigger a lapse. Renewal reminders and an annual sign-in are cheap insurance.

Matching Services to Buyers

Google Drive fits Android users and organizations on Workspace, with the strongest real-time collaboration and the shared-pool and inactivity caveats described above.

iCloud+ fits households built on Apple hardware, and it is most defensible with Advanced Data Protection enabled, where the option exists. An iCloud Backup that includes message history is not end-to-end encrypted without that setting, which matters to privacy-minded users who assume iMessage protection follows the backup.

OneDrive fits existing Microsoft 365 subscribers, and its Personal Vault adds an identity-verified layer for sensitive files. Dropbox fits teams that move large files daily and value sync behaviour over bundled extras.

Proton Drive, Sync.com, and Tresorit fit confidential material. One 2026 guide positions Tresorit for regulated teams that need audited, Swiss- or EU-hosted zero-knowledge storage with granular sharing controls. Backblaze and IDrive belong in the stack as the backup layer rather than as replacements for a sync service.

Lifetime plans, such as the one pCloud sells as a one-time purchase, appeal to subscription-averse buyers. The word “lifetime” refers to the life of the product rather than the life of the buyer, so the vendor’s longevity becomes part of the purchase.

Where the Zero-Knowledge Argument Breaks Down

Zero-knowledge answers one threat: a provider, or a government acting through the provider, reading the files. In practice, the more frequent causes of personal data loss are phished credentials, reused passwords, SIM swaps, and accidental deletion.

For an ordinary household, passkeys or hardware security keys, multi-factor authentication, and an independent backup remove more risk than a move from a mainstream vendor to an encrypted one. Mainstream providers also run security operations that few small vendors can match.

The encrypted category still earns its place where confidentiality is a professional obligation: legal, medical, journalistic, and financial work. The mistake lies in treating “encrypted” as a universal upgrade rather than a response to a specific threat model.

The Decision in Practice

Start with the ecosystem already in use, since switching costs compound quietly. Match the encryption model to the most sensitive file rather than the average one. Add an independent backup. Then read the lapse terms, including inactivity rules and what happens to files when a payment fails.

Price per terabyte becomes the tiebreaker, which is the role it should have played from the start. Plans and policies in this category change frequently, so current terms belong on the checklist before any purchase.

What People Ask