> It is inaccessible to other people using Facebook.
The wording does sound very convincing but I really don't think we can just believe their word. After all it's Facebook.
It's not practical to perform a delete in some environments. It's certainly not practical to go through backup files and delete references in others. Everybody goes through a data recovery scenario at some point.
What you should expect is best effort. Nobody is going to re-train their neural networks that referenced your data. It's doubtful that any provider would delete what they have gleaned about you simply because you wanted your account removed.
Then there's the practicality of things. If you delete your account here on HN, would you expect all conversations that you participated in to be removed? All references to your comments? Or all comments that you made removed? Do you expect them to push that change out to google? Do you expect your references in access logs removed? There's always a trail.
Facebook isn't uniquely evil. They have the same problems as everyone else, and they have those problems at an incredible scale.
People think about these things as if they are files or entries in a simple SQL database that can simply be removed. They may use databases, but to think that all of your data exists in a singular database or that all of your data only exists in databases is simply not extrapolating what you know about technology to their environment.
If google were to remove a website from their index, how long would it take for all of their environments to no longer have a record of it? And would that actually be desirable? There aren't faceless drones working on these kinds of problems. There are very smart people and most of them have a conscience and care about end users. I don't think you would find that any large group of people at facebook, google, amazon, microsoft, or any of the big companies are completely apathetic to end user concerns. I'm sure plenty are far too busy to address individuals directly, but they certainly are not apathetic.
<sorry... I seem to have rambled off on a tangent>
Training of neural networks is probably a gray area, and a potential issue for many companies. Example: Think of the recorded audio messages from Siri/GoogleNow/Cortana that gets processes and potentially stored and not deleted thereafter on their (and third parties like Nuance) servers. If one deletes an account, one would assume it also and especially also deletes all private data like messages, voice and video recording.
They do that? And is that legal? How will facebook prevent me from registering again, if they deleted all PII that they had on me? That'd be clear proof that they didn't respect my GDPR request for deletion, and I could sue them easily.
My data is mine not yours. If I withdraw my consent to you having it just delete it. If you can't do this then don't collect my data in the first place.
There's been few debates here about the definition of to 'delete' which I won't get into. However, as a user, it rubs me wrong when companies equate simple username disassociation with deletion. It's not a user's place to wonder about the practicality of deletion at scale. A user has the right to have removed all content they've produced regardless of whether it's linked with other posts.
Do they though? Maybe I'm understanding it wrong, but I thought the GDPR only applies to personally identifying information, not all data ever generated by a user. So by disassociating the user name and the post, the post has suddenly ceased to be personally identifying information and no longer needs to be deleted.
What major sites behave in a way that you find acceptable?
"This IP License ends when you delete your IP content or your account unless your content has been shared with others, and they have not deleted it."
"When you delete IP content, it is deleted in a manner similar to emptying the recycle bin on a computer. However, you understand that removed content may persist in backup copies for a reasonable period of time (but will not be available to others)."
This sounds like they properly delete it but only so long as you haven't given another user a copy of it (such as sending a message perhaps).
Also while the US has essentially no privacy protections whatsoever, I don't think a "deleted=true" would fly under EU regulations.
We don't know that. If you're feeling charitable you could believe they're being honest, but if you not then you just have to wonder. There is no way Facebook could prove they don't have a secret server with your data on it somewhere. Proving that would be impossible.
It may take up to 90 days to delete data stored in backup systems. Your info isn't accessible on Facebook during this time.
Copies of some material (example: log records) may remain in our database but are disassociated from personal identifiers.
[Updated: fix year FB was launched]
There's also a hidden link in the support pages somewhere that's supposed to actually delete your account (which is what's linked here)