Contacts are stored in the same database file as the call logs for most Android devices.� The contacts and/or people tables should be examined for contact information. It appears that in Android 10 and 11 that data was an additional table of interest.� Another table is the raw_contacts table. This table stores contact information to include names, email addresses, and phone numbers and associates them with an application, the device, or to a Google account. Should a contact have a picture associated with it, a .jpg file is included and is named to match the contact. The table deleted_contacts stores a contact_id and deleted timestamp for the removed contact.� Keep in mind as Android versions update, additional tables may be added that are not parsed by mobile forensic tools.

Additional contacts may be located in icing_contacts.db and plustcontacts.db for Google+ as well as third-party applications.