How to actually delete your data from an app

Uninstalling an app removes it from your phone. Your account, and everything attached to it, continues to exist on a server exactly as before.

This is the single most common misunderstanding about app privacy and it is worth being clear about, because the gap between uninstalling and deleting can be years.

The three things people confuse

Uninstalling. Removes local data from the device. Changes nothing on the server.

Deactivating. Hides the account and keeps everything. Many services default to this because reactivation is good for retention.

Deleting. Removes the account and the data associated with it, subject to some legitimate exceptions.

Only the third is deletion, and the wording in apps is frequently vague about which one you are being offered.

If reactivating your account restores your history, it was never deleted.

What the law actually requires

Under the GDPR, people in the EU and the UK have a right to erasure, and a request has to be acted on within one month, extendable for complex cases.

It is not absolute. Companies can retain data where they have another legal basis: tax records for invoices, fraud prevention records, data needed for a legal claim. Those exceptions are real and narrow, and "we keep everything for business reasons" is not one of them.

Both Apple and Google also require apps that allow account creation to offer in-app account deletion, which has made this considerably easier than it was a few years ago. If an app has no delete option at all, that is a policy violation as well as a bad sign.

Backups are the honest complication

Any responsible service keeps backups, and backups are usually immutable snapshots. Deleting a record from the live database does not reach into last week's backup.

What good practice looks like is that backups expire on a stated schedule, that deleted records are not restored if a backup is used, and that the retention period is published.

A company that claims instant and total deletion including from all backups is either describing an unusual architecture or is not being precise.

What to ask for

Ask for deletion rather than deactivation, in those words.

Ask what is retained, under what legal basis, and for how long.

Ask whether any third parties received your data and whether the deletion has been passed on to them. This last one is frequently forgotten and is required.

And ask for confirmation in writing, which gives you something to point at later.

How to check it happened

Try to log in. If the account is gone, that is a start and not proof.

Try a password reset for the address. Some services leave a shell account behind that will still accept a reset.

Request a copy of your data under the access right. If the company still holds something, it will appear.

Deleting a couple's data specifically

Shared accounts introduce a complication nobody expects. If two people have been writing to each other, whose data is it?

The honest answer is that it is both of theirs, and a deletion request from one person cannot simply erase the other person's copy of a conversation they also participated in. Different services handle this differently and most do not explain it anywhere.

In Duoheart the content is encrypted on the devices, which changes the shape of this: what we hold is material we cannot read, and deleting the account removes it. What exists on your partner's device is on your partner's device, and no company can reach into that on your behalf. Worth understanding before it matters rather than after.

The general rule

Delete accounts you no longer use, properly, while you still remember they exist. The cost is five minutes now and the alternative is a record sitting somewhere indefinitely, waiting for a breach or an acquisition.