I really hope I'm wrong, but I would be extremely surprised if any usable video footage can be recovered by having physical possession of a cloud-based camera such as a Nest or Ring. Perhaps one or more of the cameras is a different type, which do have some local storage, but I don't think that either Nest or Ring have any local storage at all beyond a tiny bit of buffer which is probably cleared when the camera loses power. But, it's totally possible there's some scenario I'm not thinking of, and I really hope they recover something useful.
You are mostly correct about how cloud based cameras work, but there are a few technical nuances worth mentioning.
With systems like Ring and Nest, the primary video storage is in the cloud, not on the device itself. The camera typically maintains only a very small rolling buffer in volatile memory for motion detection and clip creation. If power is lost or the device is removed, that temporary buffer is usually cleared and does not function as true local storage.
However, physical possession of the camera does not necessarily mean footage is lost. In many cases, useful evidence can still exist elsewhere in the system. For example, if the camera was actively connected before being disabled or removed, any recorded clips that were already uploaded would still exist in the cloud account. Motion event timestamps, device activity logs, connection interruptions, and last online times are often preserved server side and can help investigators establish timing even if no usable video remains.
There are also edge scenarios where limited data might persist. Some cameras briefly cache fragments before upload, some hubs or base stations maintain small amounts of metadata, and network infrastructure such as routers can sometimes show when a device disconnected. Even without video, these technical artifacts can help narrow the event window.
So while it is true that most cloud cameras do not provide meaningful local video recovery after removal, the device itself can still be relevant for logs, pairing information, timestamps, and forensic correlation with cloud records. In many investigations, timing and connectivity data end up being just as important as the footage itself.