Were I FB, I would make sure that the deletion only made the data invisible to the user and kept it for their customers. After all, we "gave them permission" in the first place so this would not violate that. If they're smart, they're already doing that.