I don't know how much time expired between events, but that doesn't make sense why she would back up the owner's information and replace it with her own despite knowing good and well that it wasn't her iPad. She may not have had criminal intent at the time she picked up the iPad, because the similar/identical cover would lead her to believe, at least at the time, that it was hers. However, she dug herself into a hole once she figured out it wasn't hers and still went ahead and replaced the information with her own. Once she figured out that it wasn't hers, all she had to do was return it to the ICU. Even if someone confronted her about returning it, all she had to say was that she was mistaken by the fact that she couldn't find hers and saw that the iPad had the same cover. It's an honest mistake, and that would have been the end of it. End of story, case closed.