Thank goodness storage is cheap. I've had a revolving door of credit/debit card numbers over the last few years thanks to identity theft, and the SaaS providers I use for personal stuff are really good about keeping my data around even after invalid credit-card auto-pay cycles fail.
For more serious data, I have to imagine that SLAs generally define data retention periods even after exiting the agreement, right? (I legitimately don't know)