Sender copies incoming media to the folders you choose, then verifies each file landed in your storage system — SHA-256 checksums for SD cards; a name-and-size check for iPhones and other internal storage that can't be hashed in place. A phone match can never authorize deletion — only hash-verified files are ever eligible for a wipe, behind a confirmation.
Every file on the media gets a SHA-256 checksum, and each one is checked against its copy in your storage system — content proven, not just names, so nothing is ever suggested for deletion on a filename match alone. The stamps land as the work finishes. The last one means Sender itself can do the wipe, behind a confirmation, and it will only ever delete files whose checksums verified. Anything unverified stays on the media, always.
SD cards, USB drives, folders and phones all scan the same way, with middle-of-clip thumbnails so you can see what's on there.
You pick the destination and files land there with collision-safe names. The copy queue routes several batches to several destinations in one run — a day of media sorted into its event folders in one pass.
Every file gets a SHA-256 checksum and is checked against its copy in your storage system — content proven, not just filenames.
Sender can wipe the card itself, behind a confirmation, and it will only ever delete files whose checksums verified. Anything unverified stays.