By recorded I mean keeping a separate copy, i.e if somebody deletes a message or file in the UI then the malicious vendor doesn't delete their copy of the messa

By recorded I mean keeping a separate copy, i.e if somebody deletes a message or file in the UI then the malicious vendor doesn't delete their copy of the message or file. That's eminently more feasible for text communications as the costs of storage are so much smaller.