Filesystem:/private/var

This folder is the mount point for  (  on modern iOS versions), which is the device's user/data partition. This deviates from the Filesystem Hierarchy Standard which places this at, however, a sym-link is placed at   that redirects to here, so it is at least somewhat compliant.

It is the larger of the two partitions, and stores all App Store applications, iTunes media, settings, photos, etc.

Before iPhone OS 1.1.3 (1.1.2 and below) all of this data was stored in /private/var/root. However, for security reasons, in 1.1.3 Apple made most applications run under the user mobile, and moved all of the data to /private/var/mobile.

Folders

 * audit (unused; iOS 6.0+?)
 * backups (unused)
 * buddy (unused)
 * cache (used by  and  )
 * containers
 * db
 * ea (unused; iOS 6.0+?)
 * empty
 * folders (unused)
 * keybags (iOS 4.0+)
 * Keychains
 * lib
 * local
 * lock
 * logs (which contains /private/var/logs/AppleSupport)
 * Managed Preferences
 * mobile (home folder for mobile user)
 * MobileAsset
 * MobileDevice
 * MobileSoftwareUpdate (used for OTA Updates; iOS 5.0+)
 * msgs
 * networkd
 * personalized_factory (unused)
 * preferences
 * root (home folder for root user)
 * run (used by lockdownd)
 * select (unused)
 * spool (unused)
 * staged_system_apps (empty)
 * stash (created by Cydia)
 * tmp (/dev/disk0s3)
 * vm (unused in iOS =<11, iOS 12+ added swapfile support.)
 * wireless (iOS 4.0+)
 * wireless (iOS 4.0+)

Files
(none)